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"})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00z\x01\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})

[  280.026143][T16608] bridge0: port 3(gretap0) entered disabled state
[  280.032813][T16608] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.039960][T16608] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.087394][T16608] device bridge0 left promiscuous mode
[  280.097130][    C0] net_ratelimit: 16 callbacks suppressed
[  280.097138][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  280.108598][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  280.312994][T16613] bridge0: port 3(gretap0) entered blocking state
[  280.319578][T16613] bridge0: port 3(gretap0) entered forwarding state
[  280.326347][T16613] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.333454][T16613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.340798][T16613] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.347904][T16613] bridge0: port 1(bridge_slave_0) entered forwarding state
08:49:03 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x8000000004)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x811b000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x27ffff, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x0, 0x0)
getpeername(r0, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @local}}}, 0x88)
prlimit64(0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280))
r1 = socket(0xa, 0x3, 0x8)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a40)={"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"})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00z\x01\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})

[  280.359151][T16613] device bridge0 entered promiscuous mode
[  280.373887][T16628] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.381139][T16628] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.396327][T16628] device bridge0 left promiscuous mode
[  280.573509][T16631] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.580634][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.588057][T16631] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.595107][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.602746][T16631] device bridge0 entered promiscuous mode
[  280.610146][T16632] bridge0: port 2(bridge_slave_1) entered disabled state
08:49:03 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x8000000004)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x811b000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x27ffff, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x0, 0x0)
getpeername(r0, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @local}}}, 0x88)
prlimit64(0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280))
r1 = socket(0xa, 0x3, 0x8)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a40)={"f540a8cd4e91a607f8791c3148f0117391bcc932b2b191ef916bae4f5e748f24566ab72744c062ae7acf724a90c4ea4b510901479f81161ccf4bf96f1704b3f4590888780ef047bd50b5039bb45768db48d4d6acfe3686b26352829d38de46597646de40c3a1509aa878d68ca90f9be18814389639d2940b6a8f564ca963aec46804b27f7e8c89a524768cecce07798752a544b972def6f6d6b878a7a2a3c5f318ee75b19c01b505a12ceb09684cfb3cab04d6c490ead2e1c90111fec70e88ec12345eb1f7a280db051b6b3128badf3af8bba53fc464547c25e882621e7a17b9e78281cf30f44799162c87c56a353d63569e09789eb69b3eca930bcac1714d73b729436b4b249fe9170b43d0ce7b80c6b09e90d83c7d84d0038bdf5b2090ab844699467e35562901eee2a48dcba7330120d0e7a22925bc4a03e7bc22882fdfc28463e555b2bfce1a676556f1f50457cd738e1023c987962521fb0f6d47e816387038a42b7f483e12c508719fc2a7a4fbdf70516134a91ea9ca30f65296268d5862b70b3cdde0658347500265ce4bf4725a662ca462381526d4ee9fc893444277a5719e8d779d8674c88132e727417ac7e6f9e94b8cf34dc0e4b46fbce2dba03fe76650375deece19bc2fb11bed59ec3b3922b2a34f3ea9bb206be7f84fbc2565a413c05f1973049c1da6f79133d917662f9eecb50703da56afd18b3c0fd7f774537d25a54ea61d7d16d6c6aaeea02ef252d033c72c574f53e03d1b39fbac0ef4b1a678936480e5cfd40ed55ea38ed3e0316957368d15dc7bba0eb89a9c2d0838a3282aa264465ade873c8fff23632942cd14bde969f6864436b460363f332d4d0e1b5c5fb46f8f8f9e3d2c585d585ca7f4396a57dc1038cf7d7458cf1452cbfa6597979521975898783c7b87168172de6264feaabdf3fc34ce41c01a6981404e7ae3df3b94a9f566dcd78a5420fc208a4c7c1e9dc3fd4feac74a1e6ac56d9bf10dc53aacecdc8df639ba4019cb7ebd29531ffd8909f2fa38a8137b5a7e9c1d5440eba13030d8e4cd31ad58b500c944780be8cc333d0f69db54954d9a34f8cd3054a44f89b7bc097c839adbf3890a13a3792941b58f2187e67f28d58db9778c4127b0822a69ad32556f4b6f44f3dbe606af57e63df8b8fc0ab75770f3d8bb48ba62b238872bd4aef2a841d422cfd9905fd6aca1c958008424719307517170d7e16b1180090e09e09e4f79852fb2c0f9deeb9ef498dc3940921a7d994ce809dca2413bb7a0ae051126b2210224774853ebcb4d3ac0badee15c80355f04b6f643f74247bab1698c0e64992533b51ec04fb3dd8b06a8c32bce1661ec45d23d373491c3f0a79de6021015f338eae11169697a615f276f560a8558272f0cd64058d720e05e5cda696e764288ab7849a6730f78bb6c90036845ffb8bcd176ebfa4240e9"})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00z\x01\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})

[  280.617408][T16632] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.630036][T16632] device bridge0 left promiscuous mode
[  280.737095][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  280.742905][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  280.837834][T16633] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.845125][T16633] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.852530][T16633] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.859640][T16633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.867217][T16633] device bridge0 entered promiscuous mode
[  280.875439][T16637] bridge0: port 3(gretap0) entered disabled state
08:49:03 executing program 5:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000300))
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1})

08:49:03 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x8000000004)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x811b000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x27ffff, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x0, 0x0)
getpeername(r0, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @local}}}, 0x88)
prlimit64(0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280))
r1 = socket(0xa, 0x3, 0x8)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a40)={"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"})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00z\x01\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})

[  280.882017][T16637] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.889204][T16637] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.897115][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  280.902927][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  280.937423][T16637] device bridge0 left promiscuous mode
[  281.137989][T16638] bridge0: port 3(gretap0) entered blocking state
[  281.144992][T16638] bridge0: port 3(gretap0) entered forwarding state
[  281.151793][T16638] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.158859][T16638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.166185][T16638] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.173333][T16638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.180731][T16638] device bridge0 entered promiscuous mode
[  281.189320][T16642] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.196411][T16642] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.207354][T16642] device bridge0 left promiscuous mode
[  281.297135][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  281.302919][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  281.412600][T16643] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.419706][T16643] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.427124][T16643] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.434180][T16643] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.441719][T16643] device bridge0 entered promiscuous mode
[  281.458156][T16750] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.465289][T16750] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.479277][T16750] device bridge0 left promiscuous mode
[  281.662257][T16751] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.669423][T16751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.676796][T16751] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.683906][T16751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.691396][T16751] device bridge0 entered promiscuous mode
[  281.777117][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  281.782896][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  285.457178][    C1] net_ratelimit: 16 callbacks suppressed
[  285.457184][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  285.468787][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:08 executing program 3:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:08 executing program 4:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:08 executing program 1:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:08 executing program 0:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4000000000000004)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0x401, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

08:49:08 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x100000001, 0x1})
creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0)

[  285.947763][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  285.954079][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:08 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/134, 0x86}], 0x1, 0x0)

[  286.130043][T16819] overlayfs: failed to resolve './file1': -2
[  286.153489][T16841] overlayfs: failed to resolve './file1': -2
[  286.168640][T16843] overlayfs: failed to resolve './file1': -2
08:49:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000240)={'hsr0\x00', @ifru_flags=0x1})

[  286.293929][T16767] overlayfs: failed to resolve './file1': -2
[  286.309658][T16805] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size.
[  286.337445][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  286.344414][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:09 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/65, 0x41)

[  286.405011][T16818] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
08:49:09 executing program 1:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:09 executing program 3:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:09 executing program 0:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:09 executing program 4:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:09 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
fsync(r0)

[  286.811105][T16909] overlayfs: failed to resolve './file1': -2
08:49:09 executing program 1:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

[  286.903382][T17024] overlayfs: failed to resolve './file1': -2
[  286.931864][T17022] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
[  286.987109][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  286.992926][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  286.999035][T17015] overlayfs: failed to resolve './file1': -2
08:49:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

[  287.100739][T17021] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size.
[  287.137130][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  287.142944][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:09 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/134, 0x86}], 0x1, 0x0)

08:49:09 executing program 0:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

[  287.209886][T17028] overlayfs: failed to resolve './file1': -2
08:49:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 4:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

[  287.492049][T17126] overlayfs: failed to resolve './file1': -2
08:49:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 3:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x400000000, &(0x7f000000a000))
chdir(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000880)=@sco, &(0x7f0000000580)=0x80, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
getrusage(0x0, &(0x7f0000000400))
fadvise64(r0, 0x37, 0xad13, 0x7)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX])
syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[])
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4)
getpid()
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000280)='./file0\x00')
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil})
r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
keyctl$clear(0x7, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0)
renameat(r7, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file1/file0\x00')
fallocate(r7, 0x0, 0x20002, 0x4000081000f5)

08:49:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 5:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = epoll_create1(0x80006)
r1 = socket(0x1a, 0x806, 0x1116)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f})
fsync(r0)
setsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4)
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x802, 0x88)
r3 = socket$netlink(0x10, 0x3, 0x4)
pipe(&(0x7f00000001c0))
r4 = dup2(r1, r0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x4000000000, @mcast1}, 0x1c)
writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109f38b590a88bfffff010001004000000028213ee20600d4ff4affff00c7e5ed5e0000dbe8b12c000000000000000000170000000000000000000000", 0x48}], 0x1)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000000c0)={0x50000008})
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
flock(r0, 0x20003)
fcntl$getown(r2, 0x9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0xfffffffffffffffc, &(0x7f0000000000)={0x0, 0x6, 0x4})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x9, 0xbbf8, 0x4, 0x2}, {0x2, 0x800, 0x4, 0x6}, {0x7, 0x1, 0x81, 0x2}]}, 0x8)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000200)=0x4000008, 0x3a2)
dup2(r0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000003c0)={0x109, 0x6, 0x1, 0x3, 0x5}, 0xfffffffffffffde3)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000480))
mq_notify(r7, &(0x7f0000000680)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000580)="e266060f3a5729d28e85c1fcde1e2a27a8", 0x0}})
mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, 0x0)

08:49:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

[  287.892873][T17181] overlayfs: failed to resolve './file1': -2
[  287.939324][T17177] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
[  288.064370][T17170] overlayfs: failed to resolve './file1': -2
08:49:10 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/134, 0x86}], 0x1, 0x0)

08:49:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)=0x9)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r4 = creat(0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e08fbf9945836fda5bd86607ea4cb75c157462c4c817e3bb71556831aa6a12b6e8670000000000000000000000000000000020efda37269eaa8467e4cffd0afa384acc076df9f75d87a366e7c31e8e574ac61ea21e55354af3d2721a76c927bbcf0706f665d5afcd2abde35c7eea7eedc36bdf94c67a26310acdd675caf6c7e817f1ca803e88799c95454dd6cfa2bad33fa25a39cfe07be01a8d0432a14a872f5ae6b366d26efac8a016afa51daeca9797998bda"], 0x0)
accept$packet(r4, 0x0, &(0x7f00000002c0)=0xfde6)
accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0)

[  288.108007][T17190] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size.
08:49:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0af51f023c123f3188a070")
r1 = epoll_create1(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r2, 0x0)

08:49:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:49:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shutdown(r0, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180), 0x4)

08:49:11 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getrlimit(0x13, 0x0)

08:49:11 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xc0984124, &(0x7f00000004c0))

08:49:11 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@expire={0x104, 0x18, 0x301, 0x0, 0x0, {{{@in6=@dev}, {@in=@multicast2}, @in=@dev}}, [@mark={0xc}]}, 0x104}}, 0x0)

[  288.431018][T17323] binder: 17322:17323 got transaction with invalid offset (0, min 0 max 0) or object.
[  288.470294][T17323] binder_transaction: 3 callbacks suppressed
08:49:11 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4)
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4)
bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r1, 0x0)

08:49:11 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:11 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x100000001}, 0x2c)
mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil)

[  288.470311][T17323] binder: 17322:17323 transaction failed 29201/-22, size 0-8 line 3131
08:49:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100010000000000d)
r1 = syz_open_pts(r0, 0x204600)
dup3(r1, r0, 0x0)

[  288.628046][ T3478] binder_release_work: 4 callbacks suppressed
[  288.628052][ T3478] binder: undelivered TRANSACTION_ERROR: 29201
08:49:11 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/134, 0x86}], 0x1, 0x0)

08:49:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:49:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0xff92)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)

08:49:11 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100010000000000d)
r1 = syz_open_pts(r0, 0x204600)
dup3(r1, r0, 0x0)

[  289.056753][T17458] binder: 17457:17458 got transaction with invalid offset (0, min 0 max 0) or object.
08:49:11 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

[  289.156292][T17458] binder: 17457:17458 transaction failed 29201/-22, size 0-8 line 3131
[  289.207190][   T12] binder: undelivered TRANSACTION_ERROR: 29201
08:49:12 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100010000000000d)
r1 = syz_open_pts(r0, 0x204600)
dup3(r1, r0, 0x0)

08:49:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:49:12 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

[  289.303326][T17476] binder: 17474:17476 got transaction with invalid offset (0, min 0 max 0) or object.
[  289.349759][T17476] binder: 17474:17476 transaction failed 29201/-22, size 0-8 line 3131
08:49:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100010000000000d)
r1 = syz_open_pts(r0, 0x204600)
dup3(r1, r0, 0x0)

08:49:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[  289.391478][   T12] binder: undelivered TRANSACTION_ERROR: 29201
[  289.524653][T17493] binder: 17490:17493 got transaction with invalid offset (0, min 0 max 0) or object.
[  289.534869][T17493] binder: 17490:17493 transaction failed 29201/-22, size 0-8 line 3131
[  289.592277][   T12] binder: undelivered TRANSACTION_ERROR: 29201
08:49:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0xff92)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)

08:49:12 executing program 2:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100000000000000, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'n*0Ek\x88k\xc2\x16[A\xfei\x00', 'yam0\x00', 'yam0\x00', 'lo\x00', @link_local, [], @link_local, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19e75ea096f07a9}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8)

08:49:12 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:12 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:12 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
preadv(r0, &(0x7f00000017c0), 0x1bd, 0x3f00)

08:49:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x4)
readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)

08:49:12 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
preadv(r0, &(0x7f00000017c0), 0x1bd, 0x3f00)

08:49:12 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

[  290.097648][T17510] xt_time: unknown flags 0xa8
08:49:12 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:12 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
preadv(r0, &(0x7f00000017c0), 0x1bd, 0x3f00)

08:49:12 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x110)

08:49:13 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4)
close(r0)

08:49:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0xff92)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)

08:49:13 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
preadv(r0, &(0x7f00000017c0), 0x1bd, 0x3f00)

08:49:13 executing program 5:
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x4, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x3ff, &(0x7f0000000140))
r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc)
pwrite64(r0, &(0x7f0000000580)="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", 0x200, 0x0)
fcntl$setstatus(r0, 0x4, 0x4401)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x3}, 0x8)
r1 = shmget$private(0x0, 0x4000, 0x54000200, &(0x7f0000ff9000/0x4000)=nil)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x4018)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/58)
io_setup(0x9, &(0x7f0000000040)=<r2=>0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x4)
io_submit(r2, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

08:49:13 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x900001, 0x3)
r1 = dup2(r0, r0)
socket$inet6(0xa, 0x80002, 0x88)
socket$inet6(0xa, 0x1000000000002, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
socket$tipc(0x1e, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x4, {0xa, 0x0, 0x7ff, @loopback, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x587000, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000005c0))
stat(&(0x7f0000000400)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
uselib(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000ac0))
getsockopt$bt_BT_VOICE(r1, 0x12, 0x3, 0x0, &(0x7f0000000000))

08:49:13 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000000040)=@ethtool_cmd={0x49}})

[  290.497535][    C0] net_ratelimit: 14 callbacks suppressed
[  290.497594][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  290.509674][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x2}, {0x6}]}, 0x10)

08:49:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x1950, 0x4)
prctl$PR_GET_SECUREBITS(0x1b)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
getpgrp(0x0)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffdfffffe}, 0x0, 0x8)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000680))
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='vboxnet0ppp1\x00', r1}, 0x10)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000000c0)=0x8)
write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="640000006f020007001f00000000000000000000000000030000000400000000000000400300000005000000000000009000000000080000000000000000040000000600000000000000040000800002000000000000008000000000070000000000000083eb6a3f58ca457870456993089910a92bb5fff5aeb1f9f4dc"], 0x7d)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a40)=""/99, 0x63}, {&(0x7f0000002ac0)=""/181, 0xb5}, {&(0x7f0000002b80)=""/82, 0x52}], 0x3, &(0x7f0000002c40)=""/168, 0xa8}, 0x2}, {{&(0x7f0000002d00)=@ipx, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/155, 0x9b}, {&(0x7f0000002e40)=""/4, 0x4}, {&(0x7f0000002e80)=""/66, 0x42}, {&(0x7f0000002f00)=""/55, 0x37}], 0x4, &(0x7f0000002f80)=""/64, 0x40}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002fc0)=""/111, 0x6f}, {&(0x7f0000003040)=""/246, 0xf6}, {&(0x7f0000003140)=""/142, 0x8e}, {&(0x7f0000003200)=""/3, 0x3}], 0x4, &(0x7f0000003280)=""/4096, 0x1000}, 0x7}], 0x4, 0x2, &(0x7f00000044c0)={0x77359400})

08:49:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
r3 = inotify_init1(0x0)
close(r3)

08:49:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000300))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xde, 0x40000)

08:49:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  290.997250][T17950] kvm: emulating exchange as write
08:49:13 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x110)

08:49:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
r3 = inotify_init1(0x0)
close(r3)

08:49:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0xff92)
write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6)

08:49:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x2}, {0x6}]}, 0x10)

08:49:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000300))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xde, 0x40000)

08:49:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
r3 = inotify_init1(0x0)
close(r3)

[  291.137101][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  291.142910][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000300))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xde, 0x40000)

08:49:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x2}, {0x6}]}, 0x10)

[  291.297086][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  291.302901][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000300))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xde, 0x40000)

08:49:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
r3 = inotify_init1(0x0)
close(r3)

08:49:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:14 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x110)

08:49:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x2}, {0x6}]}, 0x10)

[  291.697106][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  291.702946][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffc3}}, &(0x7f0000000480)='syzkaller\x00'}, 0x48)

08:49:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:14 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0)
sendmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0)
close(r2)
close(r0)

08:49:14 executing program 0:
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0)

08:49:14 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e9)

08:49:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0)
write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a)
ppoll(&(0x7f0000000140)=[{r1}, {r0, 0x8000}, {r0, 0x8208}, {r1}], 0x4, 0x0, 0x0, 0x0)

08:49:14 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e9)

08:49:14 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

08:49:14 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x87)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETVNETBE(r1, 0x894c, 0x0)

[  292.177109][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  292.182968][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:15 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x110)

08:49:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:15 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e9)

08:49:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0)
write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a)
ppoll(&(0x7f0000000140)=[{r1}, {r0, 0x8000}, {r0, 0x8208}, {r1}], 0x4, 0x0, 0x0, 0x0)

08:49:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:15 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e9)

08:49:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc0001f88, 0x4)

08:49:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0)
write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a)
ppoll(&(0x7f0000000140)=[{r1}, {r0, 0x8000}, {r0, 0x8208}, {r1}], 0x4, 0x0, 0x0, 0x0)

08:49:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0)
write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a)
ppoll(&(0x7f0000000140)=[{r1}, {r0, 0x8000}, {r0, 0x8208}, {r1}], 0x4, 0x0, 0x0, 0x0)

08:49:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:16 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="7026f2c5", 0x4)
sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f00005fafe4)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}, {{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x2, 0x0)

08:49:16 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xfffffffffffffe2a)
r1 = getpid()
getegid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x3, 0x5000000}, 0x1c)

08:49:16 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:16 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1b})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x6)

08:49:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0)

08:49:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)

08:49:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:16 executing program 1:
syz_read_part_table(0x6000, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000300)='ERS', 0x3}])

08:49:16 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf32(r1, 0x0, 0x1fd)
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)

08:49:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)

[  293.690677][T18428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
08:49:16 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0)
close(r1)
close(r0)

08:49:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)

08:49:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0)

08:49:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:16 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0xfb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00\x03\x00', 0x800000000008a03})
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0x3)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

08:49:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

08:49:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)

08:49:16 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r0}}, 0x18)

[  294.039632][T18558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
08:49:16 executing program 2:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000180), 0x127)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000180), 0x3ec79f067f8087e)

08:49:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0)

08:49:17 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3d1, &(0x7f000000cf3d)=""/195}, 0x48)

[  294.280629][T18587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
08:49:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0)

08:49:17 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x10, 0x10000000800002c0]})

08:49:17 executing program 0:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

[  294.499250][T18597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
08:49:17 executing program 5:
socket$inet6(0xa, 0x3, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x803, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7)
fstat(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x101201, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x800)
socket(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10011, r3, 0x0)

[  295.148905][T18576] 8021q: adding VLAN 0 to HW filter on device bond0
08:49:18 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0xfb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00\x03\x00', 0x800000000008a03})
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0x3)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

08:49:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x10, 0x10000000800002c0]})

08:49:18 executing program 0:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:18 executing program 2:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:18 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

[  295.345677][T18616] 8021q: adding VLAN 0 to HW filter on device bond0
08:49:18 executing program 0:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x10, 0x10000000800002c0]})

08:49:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x10, 0x10000000800002c0]})

08:49:18 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

[  295.857087][    C1] net_ratelimit: 16 callbacks suppressed
[  295.857095][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  295.868718][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:18 executing program 0:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:19 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0xfb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00\x03\x00', 0x800000000008a03})
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0x3)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

08:49:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:19 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:19 executing program 2:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:19 executing program 0:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), 0x4)

[  296.334731][T18737] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.340372][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  296.347149][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:19 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

08:49:19 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

08:49:19 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuseblk(&(0x7f0000000440)='/dev/loop0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='fuseblk\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:49:19 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:19 executing program 5:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:19 executing program 2:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x108, 0x108, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x84, 0x5, 0x1}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1200000, 0x2, "2525da691027f903460c9a1d06c597b89aba91bcfc3a1a3bdc2e93e65a1d"}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80, 0x2, 0x1, [0x1ff, 0x0, 0x0, 0x4, 0x0, 0x80, 0x2, 0x3, 0x9, 0x0, 0xca02, 0x80000001, 0xb66a, 0x0, 0x5e9, 0x5], 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x15}, {0x80, 0x200}, 0x1, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7)
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x1be4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x56d1a088, 0x0, 0xff, 0x2, 0x0, 0x3ff, 0x57b7, 0x1f, 0x7ff, 0x0, 0x9f, 0x0, 0x0, 0x241dc000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x4, 0x0, 0x2, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000b00)='trusted.overlay.redirect\x00', &(0x7f0000000b40)='./file0\x00', 0x8, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="d19c0a8a1ed27943370cd7fd32bbc2aa0d2ec9d41d705f81506c4a73be4b060ffa65f6d4f2388db9cfa4c427d8a37b72e370d7045618f9e6f4082bdb689220305cdf71f6431ece8014d2d49f369c63828b5ad3ddf7304e210b7f53827b", 0x5d, 0xffffffffffffff7f}], 0x8000, 0x0)

[  296.737099][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  296.742915][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:19 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

08:49:20 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0xfb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00\x03\x00', 0x800000000008a03})
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0x3)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

08:49:20 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

08:49:20 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendfile(r0, r0, &(0x7f0000317000), 0xff8)

08:49:20 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0)

08:49:20 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7)

[  297.264387][T18904] 8021q: adding VLAN 0 to HW filter on device bond0
08:49:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000480))
clock_adjtime(0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
eventfd2(0x80401, 0x0)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000240))
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0xfffffffffffffe12)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140))

08:49:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x98f902, 0xfdfd, [0x100000000000000]})

[  297.377536][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  297.383823][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:20 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)

08:49:20 executing program 5:
r0 = socket(0x10, 0x802, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x4c, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@IFLA_VF_RATE={0xf}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}}, 0x0)

08:49:20 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  297.537113][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  297.542917][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:20 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:20 executing program 3:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_create1(0x80004)

[  297.801469][T19287] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
[  298.054029][T19265] 8021q: adding VLAN 0 to HW filter on device bond0
08:49:20 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
mprotect(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9), 0x1000000c1)

08:49:20 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2b, &(0x7f0000000140)={0x0, 0x7530}, 0x10)

08:49:20 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:20 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:20 executing program 4:
getrlimit(0x0, &(0x7f00000000c0))
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x000\xdf\xaa_(\x00'}})

08:49:21 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x400000026, 0x18000000}, 0x2c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')

[  298.228902][T19298] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
[  298.250276][T19299] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
08:49:21 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:21 executing program 3:
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(&(0x7f0000000040)='127.0.0.1&', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp'])

[  298.422849][T19314] 9pnet: p9_fd_create_tcp (19314): problem connecting socket to 127.0.0.1&
[  298.465183][T19314] 9pnet: p9_fd_create_tcp (19314): problem connecting socket to 127.0.0.1&
[  298.481724][T19320] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
[  298.491831][T19321] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
08:49:21 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:21 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'trusted\a.(,-'}}]}})

08:49:21 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2b, &(0x7f0000000140)={0x0, 0x7530}, 0x10)

08:49:21 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x7002, &(0x7f0000000100))

08:49:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:21 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={<r2=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r2, 0x4}, 0x8)
r3 = socket$inet(0x2, 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710})
read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x10001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]})
linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400001, 0x0)
write$P9_RSTAT(r4, &(0x7f0000000a00)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x1, 0x9, {0x20, 0x3, 0x8}, 0x13010000, 0x4, 0x1, 0x100000000, 0x1, 'k', 0x10, '/dev/sequencer2\x00', 0xe, 'self}!trusted,', 0x6, ':@em1^'}}, 0x5f)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

08:49:21 executing program 3:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:21 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2b, &(0x7f0000000140)={0x0, 0x7530}, 0x10)

[  298.701321][T19331] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
[  298.741058][T19332] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present
08:49:21 executing program 5:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:21 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:21 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2b, &(0x7f0000000140)={0x0, 0x7530}, 0x10)

08:49:21 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:22 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x5, 0x0)

08:49:22 executing program 3:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  299.702936][T19465] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  299.872886][T19465] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:49:22 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  299.943889][T19465] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  300.016903][T19465] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[  300.058809][T19465] EXT4-fs (loop4): get root inode failed
08:49:22 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:22 executing program 3:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  300.099499][T19465] EXT4-fs (loop4): mount failed
[  300.293859][T19465] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  300.327259][T19465] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  300.453297][T19465] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  300.728516][T19465] EXT4-fs: failed to create workqueue
[  300.733926][T19465] EXT4-fs (loop4): mount failed
08:49:23 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC])

08:49:23 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  300.898142][    C0] net_ratelimit: 17 callbacks suppressed
[  300.898150][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  300.909633][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:23 executing program 5:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:23 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:23 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]})

08:49:23 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x24}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x275, &(0x7f0000000200)=""/207}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="cca2adcf280cda7cf5e0945bde91", 0x0}, 0x28)

[  301.264308][T19528] IPVS: sh: TCP 172.20.20.170:0 - no destination available
08:49:24 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

08:49:24 executing program 5:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000000006)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x14, 0x0, &(0x7f00000009c0)="c42ae020e0316222368f6025bcd9dd59c9b589ce"})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=<r6=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={<r7=>r6, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x47df, 0x1, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x10000, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x600000000000, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x6, 0x4, 0x0, 0x9, 0x3808, 0xc86, 0xffffffffffffdcca, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0x5}, r7, 0xf, r1, 0xa)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f80)={r0, &(0x7f0000000e80)="7638314ea6935668377c5e9d73f73c882612994c44db0d7ed2edbbd3d912e8aa6daf8d7abb7636898913c1f94e7a488dd99235b4d0c41bef650795461d1861641acf2e038aae278bf99e4a6749d0dc4467a4e975b9fcc0378f6a438fddd414801b75135ddb0aaedf04d5ef1a6602bffbb19d6686f381db838b611fd4306428459e3d368662c6753a59", 0x0}, 0x20)
ioctl$int_in(r5, 0x5452, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x40000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x115b, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0)

[  301.537127][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  301.542922][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000), 0x1)

08:49:24 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]})

[  301.697088][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  301.702910][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:24 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x1fe)

08:49:24 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]})

08:49:24 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000340), 0x8)
sendmmsg(r0, &(0x7f00000000c0), 0x40000000000005c, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180))

[  302.099046][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  302.104868][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:25 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x1fe)

08:49:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]})

08:49:25 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040))

08:49:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xed\xca\xea\x159\xf0{\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXf\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17L\xaf\xd8\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\xe4\xeb\xe1`')
fstat(r0, &(0x7f00000002c0))

08:49:25 executing program 0:
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'.yz'}, 0x0, 0x0, 0xfffffffffffffffb)

08:49:25 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x1fe)

[  302.577119][    C0] protocol 88fb is buggy, dev hsr_slave_0
08:49:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0xf0ffff, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

08:49:25 executing program 1:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
timer_gettime(0x0, &(0x7f0000000040))

08:49:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0)

08:49:25 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x1fe)

08:49:25 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0xfffffffffffffffe, 0xff9f)

08:49:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:25 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf)

08:49:25 executing program 2:
r0 = mq_open(&(0x7f0000000000)='-$\x00\x86P\x12\xa0\x19G\x83\x8f\xbb&\xca\xbd\xe91\t\x93?\xce\xeeI`\xef\v\x14\xa7\xf5&_\xfb6Yh^\x8epz\xb8\xe6\xce\x98\x01\xfe\x1e\x19\xe6\x02w\xc7oQX\xdb\xf5\ve\x7f\xf9$\x83\xb8\xcc\fO\xb3X\x8a\x0e\xbf1\n]\x91Y|\x84\xa2\x88\xe4+\xf4zO\x9c6\xce\x01A\xdff\xd2\x1b\xc1!\xa5\x7f\x9c\xc3\xa0\xc6T\x164\xeb\x7f\x9d\xf2^\x9d\xf3\x0e\xa4hX\b\x05\xaf\xaa{\"\xb7[\xa3}\x93\xc6\x01b\xb3f!\x81\xf6\xa7@\x88\x81y\x8b\xbf\x1e4q7\xe6\x9a\xf7\xe3\xcb$\x87\xba2\x1a\xb0 \x1b\x8f@\xa3\xc2\xd8l\x12\xbdJ\xd1+\x17\xbb\xc7\x83\b\xb6\xac\x9aE\xa3\x99uM|N\xdc\xf8\xcb%V\xf9\xcf\xb1m\xa9-\xfa^\xf3\xd1\xb9\xdf\xeb\xf8HK_\xba\x14v\b\xb9\xf5\xd7b\xc9I\xbc\xcd\x7f|>\x10^8.\xbe3P*6\x91\x1b\x00\xee\x00\an4\xa0P\xa9i\x9a\xd85\x906(\x9f\xacD\x9b\x82C\xd6\xcf\xbb\x10\x18\x8ea\xf0\a\xa2\xf8@\x7f\xb9%\x98\xde\xcdv\x02\rmqh\xd4\x13\xf4\xa6\xf0@7*\x1dr\a\xbc\x8bB\xdfo\xe7J4\x91\xe2\xc1i+\x9b\x9a\x8bC|\xf5Q\t\xda\xf8K\xe0K\xdcXR\xc1\x8e\n\xed\x96@\xc0\x8b\x15|4\xc9\x83\x17\xa6\xb5\xdf\xd8m8\xed\xe7\xf3Un\xb5\xf7$*\x1f)\xe7M\\}G\xadG1s\xea\x87\x8f\xf8\x04\xa8\xd5\x8eD\xf3\xa6\xa1Q<H\xd6^\xf9\x81\xf4\xd2\xec', 0x0, 0x0, 0x0)
read(r0, 0x0, 0x0)

08:49:25 executing program 0:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

08:49:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:25 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf)

08:49:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
connect$inet6(r3, &(0x7f0000000140), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28)
splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0)

[  303.167784][T19838] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
08:49:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf)

08:49:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 0:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:26 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf)

08:49:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

08:49:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 3:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  303.811085][T19941] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
08:49:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d)
listen(r0, 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004480))

08:49:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:26 executing program 2:
socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0x3e5)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:49:27 executing program 0:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

08:49:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:27 executing program 3:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:27 executing program 2:
socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0x3e5)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:49:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6)
socket$caif_seqpacket(0x25, 0x5, 0x4)

08:49:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000040)=0x4)

08:49:27 executing program 2:
socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0x3e5)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[  304.579024][T19980] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  304.666578][T19987] sctp: [Deprecated]: syz-executor.1 (pid 19987) Use of int in max_burst socket option.
[  304.666578][T19987] Use struct sctp_assoc_value instead
08:49:27 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2}, 0x0)

08:49:27 executing program 0:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:27 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x88caffff}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140))

08:49:27 executing program 2:
socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0x3e5)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:49:27 executing program 3:
socket$inet6(0xa, 0x80803, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

08:49:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

08:49:28 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./control/file0\x00')

08:49:28 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x88caffff}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140))

08:49:28 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x18}]}, 0x20}}, 0x0)

08:49:28 executing program 0:
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0)
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x1000000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0fccb86da0d5880d3a1feb6647454362d127c19de170859213aa53231a7f4a355591e25c282db89631744b3a88d3b6b54137e41617eb0a765bf5bee06e1cbd4e714d", 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x2, 0x4)
preadv(r2, &(0x7f00000017c0), 0x1fe, 0x0)

08:49:28 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x88caffff}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140))

[  305.350861][T20119] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
08:49:28 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

08:49:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffffffffffff01c}, {0x6}]}, 0x10)

08:49:28 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./control/file0\x00')

08:49:28 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100)

08:49:28 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x88caffff}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140))

08:49:28 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3}]}}}]}, 0x3c}}, 0x0)

[  305.757622][T20229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:49:28 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./control/file0\x00')

08:49:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
io_setup(0x5, &(0x7f00000000c0)=<r5=>0x0)
write$ppp(r4, &(0x7f0000000240)='8', 0x1)
io_submit(r5, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}])
r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400)
r7 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
getgid()
writev(r0, &(0x7f0000000080), 0x0)
getpeername$ax25(r6, &(0x7f0000000040)={{0x3, @default}, [@netrom, @rose, @null, @bcast, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x48)
setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000140)=0x9, 0x4)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r8=>0x0)
ioprio_get$pid(0x2, r7)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r7, 0x1004000000016)
fgetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374066d2e3a2d6b0f7972695bb3a5b7c09c34274306b6415f578ea8c75786557e24b6e97f15ecd8bd6c15acb7d3ca97958ab36d8ec53d2b0eb1db929ced"], 0x0, 0x0)
close(r3)
dup2(r6, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r8)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)

08:49:28 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./control/file0\x00')

08:49:28 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100)

[  306.186638][T20254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:49:29 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x10, r0, 0x0, 0x0)

08:49:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x0, @dev, 0x0, 0x3, 'wlc\x00', 0x0, 0x76}, {@remote, 0x4e21, 0x2000, 0x0, 0x3, 0x28d}}, 0x44)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240), 0x0, 0xfffffffffffffff8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setresuid(0x0, r2, 0x0)
r3 = inotify_init1(0x80000)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, <r4=>0x0})
process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)

[  306.257134][    C1] net_ratelimit: 17 callbacks suppressed
[  306.257142][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  306.268621][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:29 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

08:49:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x89b0, &(0x7f00000001c0)={'veth0_to_hsr\x00', @ifru_data=&(0x7f0000000000)="d71dead1de0a595033ca3de63bd5312107091cdc33c6e7f3f19ed3e184097bfd"})

08:49:29 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[  306.396797][T20270] ptrace attach of "/root/syz-executor.1"[7540] was attempted by "/root/syz-executor.1"[20270]
08:49:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="39000000130003006900000000000000ab0080e72a000000460001c70300001419000a0010000000000003f500000002000087ce54b3c532da", 0x39}], 0x1)

[  306.556655][T20279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:49:29 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@deltclass={0x24, 0x29, 0x201, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

08:49:29 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[  306.737096][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  306.743041][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  306.758351][T20285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  306.922229][T20287] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
08:49:29 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[  307.137087][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  307.142892][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  307.235909][T20287] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  307.306464][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.449876][T20296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.937107][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  307.942908][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  308.337473][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  308.343461][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
io_setup(0x5, &(0x7f00000000c0)=<r5=>0x0)
write$ppp(r4, &(0x7f0000000240)='8', 0x1)
io_submit(r5, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}])
r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400)
r7 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
getgid()
writev(r0, &(0x7f0000000080), 0x0)
getpeername$ax25(r6, &(0x7f0000000040)={{0x3, @default}, [@netrom, @rose, @null, @bcast, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x48)
setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000140)=0x9, 0x4)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r8=>0x0)
ioprio_get$pid(0x2, r7)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r7, 0x1004000000016)
fgetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374066d2e3a2d6b0f7972695bb3a5b7c09c34274306b6415f578ea8c75786557e24b6e97f15ecd8bd6c15acb7d3ca97958ab36d8ec53d2b0eb1db929ced"], 0x0, 0x0)
close(r3)
dup2(r6, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r8)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)

08:49:31 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100)

08:49:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:31 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

08:49:31 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$describe(0x1c, 0x0, 0x0, 0x0)

08:49:31 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
getpgrp(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x3f00000000000000, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

08:49:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000010], [0xc2]})

[  309.208338][T20409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000010], [0xc2]})

[  309.500016][T20415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:49:32 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000000004e23}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={<r2=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x5, 0x4}, &(0x7f0000000180)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x0, 0x10001}, 0x8)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
listen(r0, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)

08:49:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000010], [0xc2]})

08:49:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
io_setup(0x5, &(0x7f00000000c0)=<r5=>0x0)
write$ppp(r4, &(0x7f0000000240)='8', 0x1)
io_submit(r5, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}])
r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400)
r7 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
getgid()
writev(r0, &(0x7f0000000080), 0x0)
getpeername$ax25(r6, &(0x7f0000000040)={{0x3, @default}, [@netrom, @rose, @null, @bcast, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x48)
setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000140)=0x9, 0x4)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r8=>0x0)
ioprio_get$pid(0x2, r7)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r7, 0x1004000000016)
fgetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374066d2e3a2d6b0f7972695bb3a5b7c09c34274306b6415f578ea8c75786557e24b6e97f15ecd8bd6c15acb7d3ca97958ab36d8ec53d2b0eb1db929ced"], 0x0, 0x0)
close(r3)
dup2(r6, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r8)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)

08:49:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:32 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100)

08:49:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:32 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000000004e23}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={<r2=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x5, 0x4}, &(0x7f0000000180)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x0, 0x10001}, 0x8)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
listen(r0, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)

08:49:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000010], [0xc2]})

08:49:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:33 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000000004e23}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={<r2=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x5, 0x4}, &(0x7f0000000180)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x0, 0x10001}, 0x8)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
listen(r0, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)

08:49:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240), 0x14)
syz_emit_ethernet(0x13e, &(0x7f0000000040)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, '>![', 0x108, 0x0, 0x0, @remote, @empty, {[], @gre={{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "c53f9bc10b5218fbe6b21126ec5dfd4b51895eeabb8f1881b91980e74888ed41c49dc1d8bafc100ed78e3cc3b555dd235dba88b38388d4deb8c6d3795dcf58efc348b06d6b0f767c7520b7f6b0ca7326a75ba6ca9e1dadc8a4fecca66ad80f29bc3bb41a06f18c6f4f0b195587ebc281814d6457127854ef65964f36cbef44461b195c5e4c40fe1a57ae459fadf5b343cca1eeb3cdd0243195920ebeb7ebe99d397ef4d81cd3bca637aa32fbb0205fa83ce13b0277825ee8de7e55926a410d09a500e29e"}}}}}}}, &(0x7f00000001c0))

08:49:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
io_setup(0x5, &(0x7f00000000c0)=<r5=>0x0)
write$ppp(r4, &(0x7f0000000240)='8', 0x1)
io_submit(r5, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}])
r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400)
r7 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
getgid()
writev(r0, &(0x7f0000000080), 0x0)
getpeername$ax25(r6, &(0x7f0000000040)={{0x3, @default}, [@netrom, @rose, @null, @bcast, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x48)
setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000140)=0x9, 0x4)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r8=>0x0)
ioprio_get$pid(0x2, r7)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r7, 0x1004000000016)
fgetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374066d2e3a2d6b0f7972695bb3a5b7c09c34274306b6415f578ea8c75786557e24b6e97f15ecd8bd6c15acb7d3ca97958ab36d8ec53d2b0eb1db929ced"], 0x0, 0x0)
close(r3)
dup2(r6, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r8)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)

08:49:33 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:33 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:33 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000)
recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket(0x11, 0x1, 0x5)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$tipc(r5, 0x0, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0))
r8 = getpgid(0x0)
connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccce, 0x7, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0x6}, 0xe)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r7, r4, 0x4c1078b5631b409f, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, r8, r8, 0x81})
r9 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000)
ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d41d358b8361e7d73e3e48513a08593", 0xffffffbd)
ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x2, 0x5c97, 0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r6, 0x0)
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r10 = request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000009c0)='3\x00\x1e\x18J\xb6\t\xca\xd3\x00O9\x143\xd3ty\xf9 \n\x13S+\xefB\xff\x00D\xb8\xeb\fo\xf8\xbdv\xaf\xf6\x18\x1eE\x1eYQc\x94\xd2\xc8#\x9e<n\x0e\xdb\xc1\x8d\xdc\x8cx$[\x0f,\a<o_\x1aOR\x93\xf3\xc6\x1d\x17k\xc7X\x04\x00\x00\x00\x00\x00\x00\x00Q+X\xfa\xb8\x8a8\xbe\x18k\xb3\xe6\xb0J\xee\xfaO\x0fU|\xfa\x12\xd8p&\x88\xd3\xd9Ej\xf3\xe9uF\x04\x12Mw\xdd\x13!\x8c\xd6\xcb \xfa\x99u4K\x89l\x90B\xf7\x97\x18\x16~\xe6g\xbc\xc65\v(V\xbb\xb1\x02\xdd\xea\xc5<\x0f\xeb\xdbh\xff\x15\fIr\x8c\xcb\x03\xfa\xa2\x9a\xc9\xfa\x9bd\xd4:tK\x98N\xf2d\x13(\xe5\xd5.\x0e\xa7\xb3\x1cs\x96\xb6\x91\xe3\xf0V\xa5\x1c\xffK\xe4\x96\xe5\x05\xab\r\xa7\xe8\r\x8a\xf8=6\xb2\\\x88rF\x04JLW7@\xc2\x91\xdc\xd3\x0e\xf8:\xc4\x01\xbc=\x85.zI?\x8d\xd1{\xa31Zl\xc7Z\tq\xea\x96\x9d\t\r\xb8\x11FGkY\xa4\x03\xbd\xae\x86\x89y\xc3\xebs(G\xf7\xe6\x12\x82\x89\xbc\xfd\x96\x87\x9c\x14C\fO\xab\x86B\xd9Q\xd7F\x1d#\x98\\\xefH\x18d\xc9\xa0=\xe6\x7f\'\xab\n\x9fX\xa5;11\xedc\xe01.\x18\xe6\xb1}\x12', 0xffffffffffffffff)
r11 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r11)
io_setup(0x2, &(0x7f00000001c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00')

08:49:33 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000000004e23}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={<r2=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x5, 0x4}, &(0x7f0000000180)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x0, 0x10001}, 0x8)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
listen(r0, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)

08:49:33 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

08:49:33 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:34 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:34 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x341402, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0))
madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x10)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')
clock_gettime(0x7, &(0x7f0000000140))
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:34 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000)
recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket(0x11, 0x1, 0x5)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$tipc(r5, 0x0, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0))
r8 = getpgid(0x0)
connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccce, 0x7, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0x6}, 0xe)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r7, r4, 0x4c1078b5631b409f, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, r8, r8, 0x81})
r9 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000)
ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d41d358b8361e7d73e3e48513a08593", 0xffffffbd)
ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x2, 0x5c97, 0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r6, 0x0)
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r10 = request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000009c0)='3\x00\x1e\x18J\xb6\t\xca\xd3\x00O9\x143\xd3ty\xf9 \n\x13S+\xefB\xff\x00D\xb8\xeb\fo\xf8\xbdv\xaf\xf6\x18\x1eE\x1eYQc\x94\xd2\xc8#\x9e<n\x0e\xdb\xc1\x8d\xdc\x8cx$[\x0f,\a<o_\x1aOR\x93\xf3\xc6\x1d\x17k\xc7X\x04\x00\x00\x00\x00\x00\x00\x00Q+X\xfa\xb8\x8a8\xbe\x18k\xb3\xe6\xb0J\xee\xfaO\x0fU|\xfa\x12\xd8p&\x88\xd3\xd9Ej\xf3\xe9uF\x04\x12Mw\xdd\x13!\x8c\xd6\xcb \xfa\x99u4K\x89l\x90B\xf7\x97\x18\x16~\xe6g\xbc\xc65\v(V\xbb\xb1\x02\xdd\xea\xc5<\x0f\xeb\xdbh\xff\x15\fIr\x8c\xcb\x03\xfa\xa2\x9a\xc9\xfa\x9bd\xd4:tK\x98N\xf2d\x13(\xe5\xd5.\x0e\xa7\xb3\x1cs\x96\xb6\x91\xe3\xf0V\xa5\x1c\xffK\xe4\x96\xe5\x05\xab\r\xa7\xe8\r\x8a\xf8=6\xb2\\\x88rF\x04JLW7@\xc2\x91\xdc\xd3\x0e\xf8:\xc4\x01\xbc=\x85.zI?\x8d\xd1{\xa31Zl\xc7Z\tq\xea\x96\x9d\t\r\xb8\x11FGkY\xa4\x03\xbd\xae\x86\x89y\xc3\xebs(G\xf7\xe6\x12\x82\x89\xbc\xfd\x96\x87\x9c\x14C\fO\xab\x86B\xd9Q\xd7F\x1d#\x98\\\xefH\x18d\xc9\xa0=\xe6\x7f\'\xab\n\x9fX\xa5;11\xedc\xe01.\x18\xe6\xb1}\x12', 0xffffffffffffffff)
r11 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r11)
io_setup(0x2, &(0x7f00000001c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00')

[  311.297974][    C0] net_ratelimit: 10 callbacks suppressed
[  311.297998][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  311.310173][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  311.442270][T20617] gfs2: not a GFS2 filesystem
08:49:34 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x801000008912, &(0x7f0000000180)="0adc1f023c123f3188a070")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="a5"], 0x1)
read(r2, &(0x7f0000000200)=""/81, 0xfffffefc)

08:49:34 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

08:49:34 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000)
recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket(0x11, 0x1, 0x5)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$tipc(r5, 0x0, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0))
r8 = getpgid(0x0)
connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccce, 0x7, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0x6}, 0xe)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r7, r4, 0x4c1078b5631b409f, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, r8, r8, 0x81})
r9 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000)
ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d41d358b8361e7d73e3e48513a08593", 0xffffffbd)
ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x2, 0x5c97, 0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r6, 0x0)
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r10 = request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000009c0)='3\x00\x1e\x18J\xb6\t\xca\xd3\x00O9\x143\xd3ty\xf9 \n\x13S+\xefB\xff\x00D\xb8\xeb\fo\xf8\xbdv\xaf\xf6\x18\x1eE\x1eYQc\x94\xd2\xc8#\x9e<n\x0e\xdb\xc1\x8d\xdc\x8cx$[\x0f,\a<o_\x1aOR\x93\xf3\xc6\x1d\x17k\xc7X\x04\x00\x00\x00\x00\x00\x00\x00Q+X\xfa\xb8\x8a8\xbe\x18k\xb3\xe6\xb0J\xee\xfaO\x0fU|\xfa\x12\xd8p&\x88\xd3\xd9Ej\xf3\xe9uF\x04\x12Mw\xdd\x13!\x8c\xd6\xcb \xfa\x99u4K\x89l\x90B\xf7\x97\x18\x16~\xe6g\xbc\xc65\v(V\xbb\xb1\x02\xdd\xea\xc5<\x0f\xeb\xdbh\xff\x15\fIr\x8c\xcb\x03\xfa\xa2\x9a\xc9\xfa\x9bd\xd4:tK\x98N\xf2d\x13(\xe5\xd5.\x0e\xa7\xb3\x1cs\x96\xb6\x91\xe3\xf0V\xa5\x1c\xffK\xe4\x96\xe5\x05\xab\r\xa7\xe8\r\x8a\xf8=6\xb2\\\x88rF\x04JLW7@\xc2\x91\xdc\xd3\x0e\xf8:\xc4\x01\xbc=\x85.zI?\x8d\xd1{\xa31Zl\xc7Z\tq\xea\x96\x9d\t\r\xb8\x11FGkY\xa4\x03\xbd\xae\x86\x89y\xc3\xebs(G\xf7\xe6\x12\x82\x89\xbc\xfd\x96\x87\x9c\x14C\fO\xab\x86B\xd9Q\xd7F\x1d#\x98\\\xefH\x18d\xc9\xa0=\xe6\x7f\'\xab\n\x9fX\xa5;11\xedc\xe01.\x18\xe6\xb1}\x12', 0xffffffffffffffff)
r11 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r11)
io_setup(0x2, &(0x7f00000001c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00')

08:49:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)={0x7f, 0x8})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [0x20f, 0xfff]})

08:49:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x4000000000003, 0x1, 0xbfffffffffffffff}, 0x14}}, 0x0)

08:49:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  311.785281][   T26] audit: type=1804 audit(1550047774.551:82): pid=20738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir983351160/syzkaller.mi9uCs/261/memory.events" dev="sda1" ino=17185 res=1
08:49:34 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getuid()
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x8000011)
fallocate(r1, 0x8, 0x0, 0x10000)
ftruncate(r0, 0x80003)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x0, @loopback}})
lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb3800004aa1064183df3ec501e2705ebaf8dfafb17963ed7ef7ab9c2ccc96849b97fc5829eb99deeaebaba94cbd44b99210e684b02175"], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0))
mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0xf, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  311.873921][   T26] audit: type=1800 audit(1550047774.551:83): pid=20738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17185 res=0
08:49:34 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246)
ioctl$PPPIOCSACTIVE(r0, 0x4004743c, 0x0)

[  311.944955][   T26] audit: type=1804 audit(1550047774.681:84): pid=20738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir983351160/syzkaller.mi9uCs/261/memory.events" dev="sda1" ino=17185 res=1
08:49:34 executing program 5:
timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0))
clock_gettime(0x0, &(0x7f0000000c00)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80))
timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40))

[  312.055978][T20853] syz-executor.3 (20853) used obsolete PPPIOCDETACH ioctl
[  312.079720][   T26] audit: type=1800 audit(1550047774.681:85): pid=20738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17185 res=0
[  312.100918][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  312.106689][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:34 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000)
recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket(0x11, 0x1, 0x5)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$tipc(r5, 0x0, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0))
r8 = getpgid(0x0)
connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccce, 0x7, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0x6}, 0xe)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r7, r4, 0x4c1078b5631b409f, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, r8, r8, 0x81})
r9 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000)
ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d41d358b8361e7d73e3e48513a08593", 0xffffffbd)
ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x2, 0x5c97, 0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r6, 0x0)
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r10 = request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000009c0)='3\x00\x1e\x18J\xb6\t\xca\xd3\x00O9\x143\xd3ty\xf9 \n\x13S+\xefB\xff\x00D\xb8\xeb\fo\xf8\xbdv\xaf\xf6\x18\x1eE\x1eYQc\x94\xd2\xc8#\x9e<n\x0e\xdb\xc1\x8d\xdc\x8cx$[\x0f,\a<o_\x1aOR\x93\xf3\xc6\x1d\x17k\xc7X\x04\x00\x00\x00\x00\x00\x00\x00Q+X\xfa\xb8\x8a8\xbe\x18k\xb3\xe6\xb0J\xee\xfaO\x0fU|\xfa\x12\xd8p&\x88\xd3\xd9Ej\xf3\xe9uF\x04\x12Mw\xdd\x13!\x8c\xd6\xcb \xfa\x99u4K\x89l\x90B\xf7\x97\x18\x16~\xe6g\xbc\xc65\v(V\xbb\xb1\x02\xdd\xea\xc5<\x0f\xeb\xdbh\xff\x15\fIr\x8c\xcb\x03\xfa\xa2\x9a\xc9\xfa\x9bd\xd4:tK\x98N\xf2d\x13(\xe5\xd5.\x0e\xa7\xb3\x1cs\x96\xb6\x91\xe3\xf0V\xa5\x1c\xffK\xe4\x96\xe5\x05\xab\r\xa7\xe8\r\x8a\xf8=6\xb2\\\x88rF\x04JLW7@\xc2\x91\xdc\xd3\x0e\xf8:\xc4\x01\xbc=\x85.zI?\x8d\xd1{\xa31Zl\xc7Z\tq\xea\x96\x9d\t\r\xb8\x11FGkY\xa4\x03\xbd\xae\x86\x89y\xc3\xebs(G\xf7\xe6\x12\x82\x89\xbc\xfd\x96\x87\x9c\x14C\fO\xab\x86B\xd9Q\xd7F\x1d#\x98\\\xefH\x18d\xc9\xa0=\xe6\x7f\'\xab\n\x9fX\xa5;11\xedc\xe01.\x18\xe6\xb1}\x12', 0xffffffffffffffff)
r11 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r11)
io_setup(0x2, &(0x7f00000001c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00')

08:49:34 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)

08:49:35 executing program 4:
r0 = socket(0x15, 0x80005, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e1, &(0x7f00000000c0))

08:49:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

08:49:35 executing program 5:
timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0))
clock_gettime(0x0, &(0x7f0000000c00)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80))
timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40))

08:49:35 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0)

08:49:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0xffc, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1})

08:49:35 executing program 5:
timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0))
clock_gettime(0x0, &(0x7f0000000c00)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80))
timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40))

[  312.497137][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  312.502945][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:35 executing program 1:
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
socket(0x11, 0x80002, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

08:49:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

08:49:35 executing program 5:
timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0))
clock_gettime(0x0, &(0x7f0000000c00)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80))
timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40))

08:49:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0xffc, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1})

08:49:35 executing program 3:
io_setup(0x1, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x1f}])

08:49:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0xffc, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1})

08:49:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

08:49:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  312.977098][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  312.982927][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))

08:49:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0xffc, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1})

[  313.377082][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  313.382968][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:36 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x400c800, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10)
close(r0)

08:49:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:36 executing program 1:
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
socket(0x11, 0x80002, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

08:49:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:36 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100004)

08:49:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

08:49:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:36 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

08:49:36 executing program 5:
mkdir(&(0x7f0000000540)='./file0\x00', 0xffffffffffffffff)
clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$midi(0x0, 0x0, 0x200000)
r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x97b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10)
pselect6(0x40, &(0x7f00000000c0)={0x3ff, 0x100000000, 0x0, 0x2, 0x1, 0x5, 0x5, 0x5}, &(0x7f0000000180)={0x0, 0xb5b, 0x81, 0x3, 0x8, 0xfffffffffffffff9, 0x1eb0}, 0x0, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={0x1}, 0x8})
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

08:49:36 executing program 1:
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
socket(0x11, 0x80002, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

08:49:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

08:49:37 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

08:49:37 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xa0, 0xa0, 0xd0, [@vlan={'vlan\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x278)

08:49:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
connect(r1, &(0x7f0000000080)=@hci={0x1f, r2}, 0x80)
close(r1)

08:49:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:37 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

08:49:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc))
mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r2 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:49:37 executing program 1:
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
socket(0x11, 0x80002, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

08:49:37 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

08:49:37 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:37 executing program 0:
set_mempolicy(0x2, &(0x7f00000000c0)=0xbfe, 0x7ffd)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00007e0000)=""/4, &(0x7f0000000080)=0x150)

08:49:37 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

08:49:38 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

08:49:38 executing program 0:
syz_emit_ethernet(0x200073a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0)

08:49:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:38 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0))
ptrace$peekuser(0x3, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000002c0))
ftruncate(r1, 0x208200)
socket$inet6(0xa, 0x80000, 0x28000000)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4)
close(0xffffffffffffffff)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000600)=0x1, 0x4)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000380)=""/118, &(0x7f0000000280)=0x76)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000))

08:49:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

08:49:38 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$UHID_INPUT(r0, &(0x7f0000001880)={0x8, "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", 0x1000}, 0x1006)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "92dfdde1e4984e08f7db7bf72e991958"}, 0x11, 0x0)
dup2(r1, r0)
finit_module(r0, 0x0, 0x0)

08:49:38 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x100)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x2000a00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000400)=0xfeff)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote}, 0x12)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380))
readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x210, 0x4)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000007440)={0x14}, 0x14}}, 0x4000080)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14}, 0x14}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)
close(0xffffffffffffffff)

[  315.658311][   T26] audit: type=1804 audit(1550047778.431:86): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir632657141/syzkaller.nvLfDH/284/bus" dev="sda1" ino=17073 res=1
08:49:38 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x43307bd12b5744e9, 0x0, 0x0, {}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0)

08:49:38 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

08:49:38 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0)
r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
dup3(r3, r2, 0x0)

[  315.805577][   T26] audit: type=1804 audit(1550047778.461:87): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir632657141/syzkaller.nvLfDH/284/bus" dev="sda1" ino=17073 res=1
08:49:38 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0xa, &(0x7f0000000080)})

08:49:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x3, 0x0, [0x0, 0x0, 0x0]})

[  315.920455][   T26] audit: type=1804 audit(1550047778.471:88): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir632657141/syzkaller.nvLfDH/284/bus" dev="sda1" ino=17073 res=1
08:49:38 executing program 2:
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
write(r0, &(0x7f0000000080)="2400000020002551075c0165ff0ffc020200000000100f0007e1000c080018001600f000", 0x24)

08:49:38 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='syzka\x00\x00\x00\x05\x00\xf3', 0x7fff, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x16, 0x0, &(0x7f0000000340)="e460cdfba821707423070700886400a0219386dd0057", 0x0, 0x4000000000040004}, 0x28)

08:49:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:38 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0xa, &(0x7f0000000080)})

08:49:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00')
writev(r0, &(0x7f0000001900)=[{&(0x7f0000000040)='K', 0x1}], 0x1)

[  316.097819][   T26] audit: type=1800 audit(1550047778.531:89): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16786 res=0
08:49:39 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0xa, &(0x7f0000000080)})

08:49:39 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="220000002100070700be0000090007010200001e0000060000fb0404050016008000", 0x22)

08:49:39 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

[  316.657098][    C1] net_ratelimit: 10 callbacks suppressed
[  316.657104][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  316.668561][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:39 executing program 3:
r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/49, 0x0)

08:49:39 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000100)=@profile={'changeprofile ', ':dev/snd/timer\x00'}, 0x1d)

08:49:39 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0xa, &(0x7f0000000080)})

08:49:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
stat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0xffff8000, [{0x40000084}]})

08:49:39 executing program 5:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x185387, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
clone(0x1006210f, 0x0, 0x0, 0x0, &(0x7f00000004c0))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}, @ib={0x1b, 0x5, 0x2, {"2ff626a0f1cde692d5e9784551a06fc6"}, 0xfffffffffffff8b1, 0x2, 0x8}}}, 0x118)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))

08:49:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:39 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

[  316.812486][   T26] audit: type=1400 audit(1550047779.581:90): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":dev/snd/timer" pid=21615 comm="syz-executor.0"
08:49:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x34e9a7ca4708c644)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1ffc00000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)

08:49:39 executing program 5:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x185387, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
clone(0x1006210f, 0x0, 0x0, 0x0, &(0x7f00000004c0))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}, @ib={0x1b, 0x5, 0x2, {"2ff626a0f1cde692d5e9784551a06fc6"}, 0xfffffffffffff8b1, 0x2, 0x8}}}, 0x118)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))

08:49:39 executing program 3:
r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r0)
keyctl$read(0x3, r2, 0x0, 0x0)

08:49:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
stat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0xffff8000, [{0x40000084}]})

08:49:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:49:39 executing program 3:
r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r0)
keyctl$read(0x3, r2, 0x0, 0x0)

[  317.137079][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  317.143009][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:40 executing program 5:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x185387, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
clone(0x1006210f, 0x0, 0x0, 0x0, &(0x7f00000004c0))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}, @ib={0x1b, 0x5, 0x2, {"2ff626a0f1cde692d5e9784551a06fc6"}, 0xfffffffffffff8b1, 0x2, 0x8}}}, 0x118)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))

08:49:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x34e9a7ca4708c644)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1ffc00000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)

08:49:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
stat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0xffff8000, [{0x40000084}]})

08:49:40 executing program 3:
r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1325c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x4c1, r0)
keyctl$read(0x3, r2, 0x0, 0x0)

08:49:40 executing program 5:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x185387, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
clone(0x1006210f, 0x0, 0x0, 0x0, &(0x7f00000004c0))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}, @ib={0x1b, 0x5, 0x2, {"2ff626a0f1cde692d5e9784551a06fc6"}, 0xfffffffffffff8b1, 0x2, 0x8}}}, 0x118)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))

[  317.537126][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  317.543053][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:41 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x34e9a7ca4708c644)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1ffc00000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)

08:49:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
stat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x52d)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0xffff8000, [{0x40000084}]})

08:49:41 executing program 3:
r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r0)
keyctl$read(0x3, r2, 0x0, 0x0)

08:49:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)

08:49:41 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000100)='vmnet0\x00')

[  318.316656][T21782] NFS: bad mount option value specified: vmnet0
[  318.347116][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  318.352982][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  318.361121][T21819] NFS: bad mount option value specified: vmnet0
08:49:41 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:41 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200), 0x0}, 0x18)

08:49:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x34e9a7ca4708c644)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1ffc00000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)

08:49:41 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000100)='vmnet0\x00')

08:49:41 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

08:49:41 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000100)='vmnet0\x00')

[  318.737116][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  318.742931][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  318.859495][T22014] NFS: bad mount option value specified: vmnet0
08:49:42 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:42 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

08:49:42 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff})

08:49:42 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write(r2, &(0x7f0000000380)="248a89f145541bcfc255b50bbb186434eb", 0x11)
io_setup(0x1, &(0x7f0000479000)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="16", 0x1}])

08:49:42 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000100)='vmnet0\x00')

08:49:42 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:42 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

08:49:42 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff})

[  320.013032][T22024] NFS: bad mount option value specified: vmnet0
08:49:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070")
r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40189206, 0x20000000)

08:49:42 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff})

08:49:43 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

08:49:43 executing program 5:
io_setup(0x80400000000002, &(0x7f00000000c0)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000440)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x7)
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

08:49:44 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:44 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff})

08:49:44 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000029f, 0x0)

08:49:44 executing program 5:
syslog(0x4, &(0x7f0000000040)=""/8, 0x8)

08:49:44 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe, 0x2101801)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x180c20})

08:49:44 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, r1, 0x0)
mlockall(0x1)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5)
mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1)

08:49:44 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000101, 0x0)

08:49:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:44 executing program 1:
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x1000000000000091, 0x0, 0xae2ecc4d7dd3bf6a}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x11)

08:49:44 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00')

[  321.707089][    C0] net_ratelimit: 10 callbacks suppressed
[  321.707097][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  321.718558][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

[  322.507272][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  322.513566][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  322.897668][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  322.904004][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:49:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000283929d6eb20fa8767e20000000000000000000000000000000000000000000000000000fa00000000000000000000"], 0x1)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42803)

08:49:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0xf, 0x0, &(0x7f0000000380))

08:49:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:45 executing program 1:
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x1000000000000091, 0x0, 0xae2ecc4d7dd3bf6a}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x11)

08:49:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:46 executing program 1:
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x1000000000000091, 0x0, 0xae2ecc4d7dd3bf6a}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x11)

08:49:46 executing program 0:
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x2717, 0x0, &(0x7f00000001c0))

08:49:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x1)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40200, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000380), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00')
r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000005740), &(0x7f0000005780)=0x10)
socketpair(0xf, 0x5, 0xfffffffffffffeff, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x9c})
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0x7, 0x4d, 0x400000001}, 0x7)
clock_gettime(0x1, &(0x7f00000056c0))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20000, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000058c0)={<r8=>0x0, r5, 0x0, 0x5, &(0x7f0000005840)='gre0\x00'}, 0x30)
ptrace$getregs(0xffffffffffffffff, r8, 0x4, &(0x7f0000000500)=""/148)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
recvmmsg(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, &(0x7f00000001c0)=""/4, 0xfffffffffffffe39, 0x7fffffff}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/221, 0xdd, 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/145, 0x91}, {&(0x7f0000001340)=""/242, 0xf2}], 0x5}}], 0x3, 0x40000001, &(0x7f0000005700))
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r9, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

08:49:46 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x1)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4)

[  323.377086][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  323.382916][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000440))

08:49:46 executing program 3:
r0 = socket$kcm(0x10, 0x80002, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002b00672de45ae08718508acf0184c1224a3900034000140000000000008d005100000000000000000000", 0x2e}], 0x1}, 0x0)

[  323.777092][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  323.782875][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000283929d6eb20fa8767e20000000000000000000000000000000000000000000000000000fa00000000000000000000"], 0x1)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42803)

08:49:48 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
write$P9_RLCREATE(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000600)=""/4096, 0x1000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x0, &(0x7f00000004c0)='\xf8\x1d)\n\x89\f\xe0R\xa5\xe8X\xec\x84\xd8\x8a\x83p\x84l\xfc/\t\x8f\xd5!:\x96\xeb\x8c\x18\xd73S\\\x16<\xfb\xc7\xe3\xb5\xd1V\xfc+5\x863\t\xc8\x9c\x92\xe5\xe1}\xfbp\xe0\xcb\xa2N\xefnZ=\x86\x90\x85A I\xd1Q\xedB\xa0\xda{\x91\xe2\x90\xb0\xfb\x1d\x88\x87\x9e\xcc\x00\xce\xf3t\xa2\xf8\x9a\x95\x1d/\xff;\xc4\xff\x15\x9d\xe0\x88\xc0\xcf\xd6\x85\xab0GI\x17\xb1\x03\x89%\xf7\x9eh\xab\x7f\xf2\xde\x92\xa6\xd9\x857\xa7\xbfg\x10\x97\xf7\xbb[k\x0eW\x066\x01\xf5p\xea\x7f\x92\xfe\xf5\x1d7Z4?\xd9\x1f\xe7O\xe0\xd8\x03%%\xe2n\x18\x91\x88\xa7ZYpv\"\xce=9\x88\xa4\xb4\xe7\xbd\xb4O5z\x9e\x19\xb3\xefifk,\ts\x02\xd2\xb6\xe2*\xee\x9aq\xd0\x9cb\xfa^\x8eX\xf7\xe2b\x9f\x1c\xee\xd6\xe0|\xa6u\x03T\xea\xd1\x16x\xcc/\x7f[\xa7\xb4\x1e:~\xef\x10\xd5\xedm\xe2#nb\xbe\x94\xa1#\xc6\xad\xe8\x1c@YM\xddx*\xd9\x91\xd1Y')

08:49:48 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}})

08:49:48 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x200000000080800)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

08:49:48 executing program 3:
r0 = socket$kcm(0x10, 0x80002, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002b00672de45ae08718508acf0184c1224a3900034000140000000000008d005100000000000000000000", 0x2e}], 0x1}, 0x0)

08:49:48 executing program 1:
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x1000000000000091, 0x0, 0xae2ecc4d7dd3bf6a}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x11)

08:49:48 executing program 3:
r0 = socket$kcm(0x10, 0x80002, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002b00672de45ae08718508acf0184c1224a3900034000140000000000008d005100000000000000000000", 0x2e}], 0x1}, 0x0)

08:49:48 executing program 4:
setrlimit(0x8, &(0x7f000000a000))
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000))
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2110, r0, 0x0)

[  326.093693][T22461] autofs4:pid:22461:autofs_fill_super: called with bogus options
08:49:48 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000140)=0xffffffffffffff91, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @local}, 0x1c)
recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0)

08:49:49 executing program 3:
r0 = socket$kcm(0x10, 0x80002, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002b00672de45ae08718508acf0184c1224a3900034000140000000000008d005100000000000000000000", 0x2e}], 0x1}, 0x0)

08:49:49 executing program 5:
syz_emit_ethernet(0x6f, &(0x7f0000000400)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr=0xffffffffffff7fff, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "295470da7bc18c94cb"}}}}}}, 0x0)

08:49:49 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000160a43ba5d806055b6fdd80b40000000200001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

[  326.396802][T22588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
08:49:49 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000283929d6eb20fa8767e20000000000000000000000000000000000000000000000000000fa00000000000000000000"], 0x1)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42803)

08:49:49 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f0801000000009727c1c6fe36cef3e26def23000200000011000013", 0x1d)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))

08:49:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x201, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0)

08:49:49 executing program 5:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:49 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x1c, 0x18, 0x301, 0x0, 0x0, {0xa, 0xf0ffffffffffff}}, 0x1c}}, 0x0)

08:49:49 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0)
writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
read(r2, &(0x7f0000000000)=""/253, 0xfd)

08:49:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x20000000000000a0, 0x0)

08:49:49 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:49 executing program 5:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:49 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

[  327.022865][T22673] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  327.057095][    C1] net_ratelimit: 10 callbacks suppressed
[  327.057102][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  327.068615][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  327.083200][T22725] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:49:49 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000283929d6eb20fa8767e20000000000000000000000000000000000000000000000000000fa00000000000000000000"], 0x1)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42803)

08:49:49 executing program 0:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:49 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:49 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:50 executing program 5:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:50 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:50 executing program 0:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:50 executing program 5:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

[  327.537821][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  327.544342][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:50 executing program 0:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

08:49:50 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
flock(r0, 0xffffffffffffffff)
preadv(r1, &(0x7f0000000480), 0x100000000000021c, 0x0)

[  327.923883][T22754] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  327.937099][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  327.942945][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:50 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000005c40)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r3}}}]}}]}, 0x60}}, 0x0)

08:49:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:50 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40046103, &(0x7f0000000280)={'team0\x00'})

08:49:50 executing program 0:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc008551c, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/205, 0xcd}], 0x2, 0x0)
splice(0xffffffffffffffff, &(0x7f0000001540), r0, 0x0, 0x6, 0x4)

[  328.158085][T22785] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  328.166792][T22787] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  328.190136][T22788] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
08:49:51 executing program 0:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc008551c, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/205, 0xcd}], 0x2, 0x0)
splice(0xffffffffffffffff, &(0x7f0000001540), r0, 0x0, 0x6, 0x4)

08:49:51 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40046103, &(0x7f0000000280)={'team0\x00'})

08:49:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

[  328.252701][T22829] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
08:49:51 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r0)

08:49:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

08:49:51 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:51 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40046103, &(0x7f0000000280)={'team0\x00'})

08:49:51 executing program 0:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc008551c, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/205, 0xcd}], 0x2, 0x0)
splice(0xffffffffffffffff, &(0x7f0000001540), r0, 0x0, 0x6, 0x4)

[  328.458645][T22917] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:49:51 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000000500))
getrandom(0x0, 0x0, 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f00000006c0)=""/47, 0x2f}}, 0x10)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x801)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r1, &(0x7f0000000000)=0xb400, 0x10000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)

08:49:51 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40046103, &(0x7f0000000280)={'team0\x00'})

08:49:51 executing program 0:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc008551c, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/205, 0xcd}], 0x2, 0x0)
splice(0xffffffffffffffff, &(0x7f0000001540), r0, 0x0, 0x6, 0x4)

[  328.524326][T22921] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
08:49:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0)

08:49:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1)
recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0)

08:49:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffffffffffc)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
getpid()
getpgid(0x0)
getpid()
getpgid(0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0xf7)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b8)
sendfile(r1, r2, 0x0, 0x1000000000000fe)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

08:49:51 executing program 0:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xd3, 0x0, @ipv4={[], [], @local}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00')
sendfile(r0, r1, 0x0, 0x88008)

[  328.737081][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  328.742924][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:51 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x1000080000000032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000011000/0x2000)=nil, 0x2000})

08:49:51 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

08:49:51 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x5}, 0x2c)
bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x740000, 0x0, 0x10020000000, 0x0, 0x0, [0x0, 0x6c00000000000000]}, 0x2c)

08:49:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x200007d64, 0x4)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10)

08:49:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0)

08:49:51 executing program 4:
r0 = socket(0x1, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x290}], 0x1, 0x0)

08:49:51 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

[  329.059203][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
08:49:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x200007d64, 0x4)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10)

08:49:51 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000440)=ANY=[])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)

08:49:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80000000000a02, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)

[  329.137074][    C1] protocol 88fb is buggy, dev hsr_slave_0
08:49:51 executing program 4:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9})

08:49:52 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

08:49:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x200007d64, 0x4)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10)

08:49:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0)

08:49:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000340)=""/35)
fanotify_init(0x0, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20200, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0)

08:49:52 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x200007d64, 0x4)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10)

08:49:52 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

08:49:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0)

08:49:52 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:52 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000440)=ANY=[])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)

08:49:52 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000880)=""/207, 0xcf, 0x12100, &(0x7f0000000240)={0x2, 0x4e22}, 0x10)
sendto$unix(r0, &(0x7f00000003c0), 0x0, 0x40881, 0x0, 0x0)
fchdir(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={0x0, r2}, 0x14)
sendmmsg(r2, &(0x7f0000006940)=[{{&(0x7f0000005140)=@caif=@util={0x25, "ff90d9dac336bab0b4d33b629722bf52"}, 0x80, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xdba}], 0x2, 0x24040881)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file1\x00', 0x0)
setfsgid(0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x5, 0x0, 0x1})
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x1, 0x4)
sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
accept$inet(r0, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

08:49:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000340)=""/35)
fanotify_init(0x0, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20200, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0)

08:49:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000340)=""/35)
fanotify_init(0x0, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20200, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0)

08:49:52 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x3e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={<r3=>0x0, @in={{0x2, 0x4e21, @empty}}, [0x8, 0xc1ab, 0x9, 0x8, 0x1f, 0x3ff, 0x8, 0x6, 0x28, 0x80000000, 0x2, 0x2, 0xffffffff, 0x17, 0xf4e]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x2d, 0x3, 0x3efa, 0x3}, &(0x7f0000000180)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'qu2zZ\xdeqtC\x9e\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00`\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3b310000, {}, {}, @connect}], 0xffffff76)

08:49:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000880)=""/207, 0xcf, 0x12100, &(0x7f0000000240)={0x2, 0x4e22}, 0x10)
sendto$unix(r0, &(0x7f00000003c0), 0x0, 0x40881, 0x0, 0x0)
fchdir(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={0x0, r2}, 0x14)
sendmmsg(r2, &(0x7f0000006940)=[{{&(0x7f0000005140)=@caif=@util={0x25, "ff90d9dac336bab0b4d33b629722bf52"}, 0x80, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xdba}], 0x2, 0x24040881)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file1\x00', 0x0)
setfsgid(0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x5, 0x0, 0x1})
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x1, 0x4)
sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
accept$inet(r0, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

08:49:52 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000340)=""/35)
fanotify_init(0x0, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20200, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0)

08:49:52 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x3e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={<r3=>0x0, @in={{0x2, 0x4e21, @empty}}, [0x8, 0xc1ab, 0x9, 0x8, 0x1f, 0x3ff, 0x8, 0x6, 0x28, 0x80000000, 0x2, 0x2, 0xffffffff, 0x17, 0xf4e]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x2d, 0x3, 0x3efa, 0x3}, &(0x7f0000000180)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'qu2zZ\xdeqtC\x9e\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00`\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3b310000, {}, {}, @connect}], 0xffffff76)

08:49:52 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000440)=ANY=[])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)

08:49:53 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:53 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x3e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={<r3=>0x0, @in={{0x2, 0x4e21, @empty}}, [0x8, 0xc1ab, 0x9, 0x8, 0x1f, 0x3ff, 0x8, 0x6, 0x28, 0x80000000, 0x2, 0x2, 0xffffffff, 0x17, 0xf4e]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x2d, 0x3, 0x3efa, 0x3}, &(0x7f0000000180)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'qu2zZ\xdeqtC\x9e\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00`\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3b310000, {}, {}, @connect}], 0xffffff76)

08:49:53 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c06, 0x0)

08:49:53 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:53 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000440)=ANY=[])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)

08:49:53 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c06, 0x0)

08:49:53 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x3e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={<r3=>0x0, @in={{0x2, 0x4e21, @empty}}, [0x8, 0xc1ab, 0x9, 0x8, 0x1f, 0x3ff, 0x8, 0x6, 0x28, 0x80000000, 0x2, 0x2, 0xffffffff, 0x17, 0xf4e]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x2d, 0x3, 0x3efa, 0x3}, &(0x7f0000000180)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'qu2zZ\xdeqtC\x9e\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00`\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3b310000, {}, {}, @connect}], 0xffffff76)

08:49:53 executing program 0:
syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000880)=""/207, 0xcf, 0x12100, &(0x7f0000000240)={0x2, 0x4e22}, 0x10)
sendto$unix(r0, &(0x7f00000003c0), 0x0, 0x40881, 0x0, 0x0)
fchdir(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={0x0, r2}, 0x14)
sendmmsg(r2, &(0x7f0000006940)=[{{&(0x7f0000005140)=@caif=@util={0x25, "ff90d9dac336bab0b4d33b629722bf52"}, 0x80, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xdba}], 0x2, 0x24040881)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xff54}, 0x1006)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file1\x00', 0x0)
setfsgid(0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x5, 0x0, 0x1})
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x1, 0x4)
sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
accept$inet(r0, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

08:49:53 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x101080)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x0, 0x401, 0x0, @stepwise={{0x0, 0x6}, {0x86, 0x1}, {0x9}}})
socketpair(0x1e, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r2, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

08:49:53 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c06, 0x0)

08:49:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000004e00000016", 0x31, 0x1400}], 0x0, 0x0)

08:49:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)

08:49:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0))

08:49:53 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c06, 0x0)

[  331.029010][T23502] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
08:49:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)

08:49:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0))

[  331.107145][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  331.125737][T23502] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  331.156044][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  331.170551][T23502] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  331.190978][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
08:49:53 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x54c}}, 0x18)

08:49:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)

[  331.202942][T23502] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  331.242465][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
08:49:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x54c}}, 0x18)

[  331.321543][T23502] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  331.333096][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  331.377737][T23502] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  331.410759][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  331.431539][T23502] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  331.445660][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  331.455308][T23502] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  331.469322][T23502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
08:49:54 executing program 0:
syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000880)=""/207, 0xcf, 0x12100, &(0x7f0000000240)={0x2, 0x4e22}, 0x10)
sendto$unix(r0, &(0x7f00000003c0), 0x0, 0x40881, 0x0, 0x0)
fchdir(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={0x0, r2}, 0x14)
sendmmsg(r2, &(0x7f0000006940)=[{{&(0x7f0000005140)=@caif=@util={0x25, "ff90d9dac336bab0b4d33b629722bf52"}, 0x80, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xdba}], 0x2, 0x24040881)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file1\x00', 0x0)
setfsgid(0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x5, 0x0, 0x1})
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x1, 0x4)
sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
accept$inet(r0, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

08:49:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0))

08:49:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)

08:49:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x54c}}, 0x18)

08:49:54 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000004e00000016", 0x31, 0x1400}], 0x0, 0x0)

08:49:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000004e20}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000400)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{}, {}]}, 0x10)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="100000000500000000", 0x9}])

[  331.909667][T23550] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  331.917576][T23550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
08:49:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x54c}}, 0x18)

08:49:54 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000294f74)="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", 0xfc)

[  331.974553][T23550] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
08:49:54 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x2, 0x0)
r2 = getpid()
kcmp(r2, r2, 0x0, r0, r1)

08:49:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0))

[  332.029040][T23550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  332.083885][T23566] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'.
[  332.097100][    C0] net_ratelimit: 14 callbacks suppressed
[  332.097107][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  332.108574][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  332.126041][T23550] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
08:49:54 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="23000000280007031dfffd946f610500070000001f00000000000000f1ffffff0400ff", 0x23}], 0x1}, 0x0)

08:49:54 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

[  332.148431][T23550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  332.173302][T23550] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  332.186116][T23550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  332.501951][T23582] IPVS: ftp: loaded support on port[0] = 21
08:49:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0)

08:49:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140))

08:49:55 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000004e00000016", 0x31, 0x1400}], 0x0, 0x0)

08:49:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x80002, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="100000000500000000", 0x9, 0x8000000000000000}])

08:49:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sysinfo(&(0x7f0000000480)=""/142)

[  332.871001][T23594] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  332.879304][T23594] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  332.897093][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  332.902916][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:55 executing program 2:
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000440), 0x4)

08:49:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x101, 0x1, 0xfffffffffffffc0e}, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000380)='/dev/vsock\x00', 0xfffffffffffffffc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000006c40)=ANY=[@ANYBLOB="4e000000c9552c7cc01d7f1a503806c0d644f5758db26fa0be46d1ece308d2911c59abfc153487945debe62fb37636f62168ba77a95faf6a7810d6fdda9f0db31fe400000000000000000000000000000000"], 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
write$UHID_INPUT2(r2, &(0x7f0000000480)={0xc, 0xc8, "96f41c24cdb9092936caefc6cadc91afb96b2f5d1691231921420b64755a70b830717edadfb3172e00e2711bf26f4a6c2b74c438552dc64bb50cc70fb69883fd8bc8729f88f5adca57ce65d2559fcf8f6336d56e65a0ece1459b611bd7606e2a56b5c06daab6936a888b7951743296ac3a5fc62022bbb743b75095946eed2b85c39a79d770879d8dc2a4b7c381d3d4ae42de52081d75f71313f5f139a58a477f505cd53bc02ecf1956ec4369384ed47d9eb14e6f3fb9970c7c21575367818567d572eea866e0dcee"}, 0xce)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)=""/183, &(0x7f0000000340)=0xb7)

[  332.915507][T23594] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  332.925228][T23594] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  332.941031][T23594] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  332.966697][T23594] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
08:49:55 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4005)

08:49:55 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x6003, 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x200)

[  333.010083][T23594] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  333.029208][T23594] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
08:49:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, 0x0)

08:49:55 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000004e00000016", 0x31, 0x1400}], 0x0, 0x0)

[  333.237939][T23629] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  333.245856][T23629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  333.254996][T23629] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  333.271178][T23629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  333.280853][T23629] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  333.288852][T23629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  333.297197][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  333.297264][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  333.297281][T23629] F2FS-fs (loop5): Invalid segment/section count (22, 78 x 1)
[  333.297294][T23629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  333.446447][T23621] IPVS: ftp: loaded support on port[0] = 21
[  333.777103][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  333.782926][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  334.177106][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  334.182939][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:49:58 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa66083c540e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1fec0ce58dd168688e6c45a2d8381f4c9a4dfa0fdbb9c9f9e0ffe482aabc46830685fd52c4413cd4d9929999530dec36e01bfcd34099fbe33339b575ff07af0ec8c1a3c4470c103362070b6230923b6a576f83bd964cdafeaeec9e341d82f90054773b4bb1886feeab2b03ec217b9c7e1caba03da6c718f16cbf30431abe8bb25295fb02cdf4fe3a04f89cf9cc5152d48d92b3f8c9e53beb90474488822da8c6ff25760c06fa435f9d0854024945f872c2d61c78c2db8a5d40e8acbd8c00e008aa50d36c09ac673fb47850a7bf8c3394a2e8112c10c10b5c9a7ee6d364ca52a1e1422e433bb020f2e74eb600033d1af7f5e2bd98ba21417e6daa73284c958ac353dc9add51e9b3ce7558cd3f47417d148444ac3a4012a393f87f3edfe83a68f9c5c80fa3e3605150e199f0443b908f11934f96745dcdf9079b275908bdfa7f470c6583c2f17d00f865afa83a0161d65624de63dfa09e359e1eb0000000100000000b8726651fba34a330eb4d117571008a9634576a1d3e245355788c524a072e1dd361370769a3250291fbb1c0015bbe190d93320e4cf2bfe640f9082a4a33524291403c723ff866b37e651eb32b16803511b5e4ca7afa48ff5dba1559deb21413bee6d818b648d60e299d9ef9e39846d771f4eb6e2fbefac6290fc2cbb1af648451675a870b77b956db74420005e9393520c971741bb4529", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:49:58 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x6003, 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x200)

08:49:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, 0x0)

08:49:58 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))

08:49:58 executing program 5:
r0 = socket(0x1e, 0x1, 0x0)
bind(r0, &(0x7f0000afb000)=@generic={0x1e, "0100030000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80)

08:49:58 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x101, 0x1, 0xfffffffffffffc0e}, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000380)='/dev/vsock\x00', 0xfffffffffffffffc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000006c40)=ANY=[@ANYBLOB="4e000000c9552c7cc01d7f1a503806c0d644f5758db26fa0be46d1ece308d2911c59abfc153487945debe62fb37636f62168ba77a95faf6a7810d6fdda9f0db31fe400000000000000000000000000000000"], 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
write$UHID_INPUT2(r2, &(0x7f0000000480)={0xc, 0xc8, "96f41c24cdb9092936caefc6cadc91afb96b2f5d1691231921420b64755a70b830717edadfb3172e00e2711bf26f4a6c2b74c438552dc64bb50cc70fb69883fd8bc8729f88f5adca57ce65d2559fcf8f6336d56e65a0ece1459b611bd7606e2a56b5c06daab6936a888b7951743296ac3a5fc62022bbb743b75095946eed2b85c39a79d770879d8dc2a4b7c381d3d4ae42de52081d75f71313f5f139a58a477f505cd53bc02ecf1956ec4369384ed47d9eb14e6f3fb9970c7c21575367818567d572eea866e0dcee"}, 0xce)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)=""/183, &(0x7f0000000340)=0xb7)

08:49:58 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x6003, 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x200)

08:49:58 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:49:58 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))

08:49:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, 0x0)

08:49:58 executing program 0:
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x6003, 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x200)

08:49:58 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))

08:50:00 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:00 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:00 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))

08:50:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, 0x0)

08:50:00 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x101, 0x1, 0xfffffffffffffc0e}, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000380)='/dev/vsock\x00', 0xfffffffffffffffc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000006c40)=ANY=[@ANYBLOB="4e000000c9552c7cc01d7f1a503806c0d644f5758db26fa0be46d1ece308d2911c59abfc153487945debe62fb37636f62168ba77a95faf6a7810d6fdda9f0db31fe400000000000000000000000000000000"], 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
write$UHID_INPUT2(r2, &(0x7f0000000480)={0xc, 0xc8, "96f41c24cdb9092936caefc6cadc91afb96b2f5d1691231921420b64755a70b830717edadfb3172e00e2711bf26f4a6c2b74c438552dc64bb50cc70fb69883fd8bc8729f88f5adca57ce65d2559fcf8f6336d56e65a0ece1459b611bd7606e2a56b5c06daab6936a888b7951743296ac3a5fc62022bbb743b75095946eed2b85c39a79d770879d8dc2a4b7c381d3d4ae42de52081d75f71313f5f139a58a477f505cd53bc02ecf1956ec4369384ed47d9eb14e6f3fb9970c7c21575367818567d572eea866e0dcee"}, 0xce)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)=""/183, &(0x7f0000000340)=0xb7)

08:50:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_emit_ethernet(0x7ffff, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

[  337.457075][    C1] net_ratelimit: 10 callbacks suppressed
[  337.457082][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  337.468565][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:00 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5ca2, 0x0, 0x0, 0x1e6)

[  337.713374][T23830] IPVS: ftp: loaded support on port[0] = 21
[  337.729522][T23835] IPVS: ftp: loaded support on port[0] = 21
[  337.947756][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  337.953724][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  338.337141][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  338.342958][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:01 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_emit_ethernet(0x7ffff, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

08:50:01 executing program 3:
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0)

08:50:01 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x101, 0x1, 0xfffffffffffffc0e}, 0x0)
request_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000380)='/dev/vsock\x00', 0xfffffffffffffffc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000006c40)=ANY=[@ANYBLOB="4e000000c9552c7cc01d7f1a503806c0d644f5758db26fa0be46d1ece308d2911c59abfc153487945debe62fb37636f62168ba77a95faf6a7810d6fdda9f0db31fe400000000000000000000000000000000"], 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
write$UHID_INPUT2(r2, &(0x7f0000000480)={0xc, 0xc8, "96f41c24cdb9092936caefc6cadc91afb96b2f5d1691231921420b64755a70b830717edadfb3172e00e2711bf26f4a6c2b74c438552dc64bb50cc70fb69883fd8bc8729f88f5adca57ce65d2559fcf8f6336d56e65a0ece1459b611bd7606e2a56b5c06daab6936a888b7951743296ac3a5fc62022bbb743b75095946eed2b85c39a79d770879d8dc2a4b7c381d3d4ae42de52081d75f71313f5f139a58a477f505cd53bc02ecf1956ec4369384ed47d9eb14e6f3fb9970c7c21575367818567d572eea866e0dcee"}, 0xce)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)=""/183, &(0x7f0000000340)=0xb7)

08:50:01 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:01 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_emit_ethernet(0x7ffff, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

08:50:01 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f00000002c0)=@updsa={0xf0, 0x1a, 0x9, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in=@dev}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

08:50:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_emit_ethernet(0x7ffff, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

08:50:01 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x2, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0)

08:50:01 executing program 2:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
perf_event_open(&(0x7f00000008c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x1)
bind$can_raw(r0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
close(r0)
unshare(0x40000400)

08:50:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x184)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
io_setup(0x27, &(0x7f0000000240))
close(r1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

[  338.729883][T23996] mip6: mip6_rthdr_init_state: spi is not 0: 33554432
[  338.741251][T23996] mip6: mip6_rthdr_init_state: spi is not 0: 33554432
[  339.147087][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  339.152891][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  339.518170][T24002] vivid-002: kernel_thread() failed
[  339.537116][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  339.542912][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:04 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@iv={0x18}], 0x18}, 0x0)

08:50:04 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x184)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
io_setup(0x27, &(0x7f0000000240))
close(r1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

08:50:04 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x9dad, 0x4)

08:50:04 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40)
bind$can_raw(r2, &(0x7f0000000140), 0x10)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000700)="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", 0x258)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000008})
semget$private(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x0)
timer_delete(0x0)
unshare(0x40000000)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xffffffffffffff78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff)

08:50:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0)
r1 = dup(r0)
pread64(r1, 0x0, 0x0, 0x0)

08:50:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)

08:50:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0)
r1 = dup(r0)
pread64(r1, 0x0, 0x0, 0x0)

08:50:04 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfd7b, &(0x7f0000000380)=""/251}, 0x48)

08:50:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0)
r1 = dup(r0)
pread64(r1, 0x0, 0x0, 0x0)

[  342.006080][T24024] IPVS: ftp: loaded support on port[0] = 21
08:50:04 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bond_slave_0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900), 0x37b}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x21a, &(0x7f0000001e40), 0x32}}], 0x2b8, 0x0)

[  342.086558][T24026] IPVS: ftp: loaded support on port[0] = 21
08:50:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)

[  342.498105][    C0] net_ratelimit: 10 callbacks suppressed
[  342.498151][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  342.510560][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  343.297975][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  343.304730][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  343.697087][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  343.702910][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  344.177133][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  344.182990][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  344.578689][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  344.585406][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  347.857101][    C1] net_ratelimit: 10 callbacks suppressed
[  347.857109][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  347.868587][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  348.337130][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  348.342931][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  348.738699][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  348.745488][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  349.537156][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  349.542974][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  349.938116][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  349.947061][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  352.897121][    C0] net_ratelimit: 10 callbacks suppressed
[  352.897134][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  352.908587][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  353.698105][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  353.704404][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  354.097277][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  354.103057][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  354.577174][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  354.582988][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  354.977059][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  354.983405][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:18 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25DELFWD(r0, 0x8907, 0x0)

08:50:18 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0)
r1 = dup(r0)
pread64(r1, 0x0, 0x0, 0x0)

08:50:18 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)

08:50:18 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x10}, 0x34000}], 0x1}, 0x0)

08:50:18 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x184)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
io_setup(0x27, &(0x7f0000000240))
close(r1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

08:50:18 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

08:50:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:18 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz'})

08:50:18 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

08:50:18 executing program 2:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

[  355.696284][T24179] input: syz1 as /devices/virtual/input/input27
08:50:18 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)

[  355.757442][T24188] input: syz1 as /devices/virtual/input/input28
08:50:18 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

08:50:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040))

08:50:18 executing program 2:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

08:50:18 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:18 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

[  356.072431][T24211] input: syz1 as /devices/virtual/input/input29
[  356.097942][T24214] input: syz1 as /devices/virtual/input/input30
08:50:19 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x184)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
io_setup(0x27, &(0x7f0000000240))
close(r1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

08:50:19 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

08:50:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040))

08:50:19 executing program 2:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

08:50:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:19 executing program 5:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

[  356.520434][T24227] input: syz1 as /devices/virtual/input/input31
[  356.553423][T24232] input: syz1 as /devices/virtual/input/input32
08:50:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040))

08:50:19 executing program 2:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

08:50:19 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:19 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

08:50:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040))

[  356.806046][T24254] input: syz1 as /devices/virtual/input/input33
[  356.829178][T24256] input: syz1 as /devices/virtual/input/input34
08:50:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0xec8}}, 0x5000000)

08:50:20 executing program 5:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

08:50:20 executing program 2:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e0000002b00812de41ae087185082cf0124b0eba06ec400014100000000001713d7505951dae2043a3a9c000800", 0x2e}], 0x1}, 0x0)

08:50:20 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000f0607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xf0}, 0x0)

08:50:20 executing program 0:
setrlimit(0x8, &(0x7f00000a3ff0))
r0 = socket(0x40000000018, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_LOCK(r2, 0xb)

08:50:20 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x2282, &(0x7f0000000000))

[  357.358391][T24272] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  357.373511][T24277] Enabling of bearer <::œ> rejected, illegal name
08:50:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8)=0xeef, 0x2, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0xfff, &(0x7f000041e000/0x1000)=nil, 0x2)

08:50:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f0000000040))

08:50:20 executing program 5:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2})

08:50:20 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'%at\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x138, [0x20000480, 0x0, 0x0, 0x200004b0, 0x200004e0], 0x90, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'%nat\x00', 0x10}}]}]}, 0x1b0)

08:50:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0xec8}}, 0x5000000)

08:50:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f0000000040))

08:50:20 executing program 4:
r0 = socket(0x40000000015, 0x805, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0}, 0x0)

08:50:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
accept$packet(0xffffffffffffff9c, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000dc0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)={'team0\x00'})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
getpeername(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
close(0xffffffffffffffff)

08:50:20 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, 0x0)

08:50:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f0000000040))

08:50:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f0000000040))

08:50:21 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, <r1=>0x0}}, 0x10)
setrlimit(0x7, &(0x7f0000000040))
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc)

08:50:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x3000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
socketpair(0xa, 0x3, 0xff, &(0x7f0000000280))

08:50:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, 0x0)

08:50:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0xec8}}, 0x5000000)

08:50:21 executing program 5:
syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x1ff, 0x300)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x210007f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x3)
semget$private(0x0, 0x0, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x0, 0x5}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000500))
r0 = syz_init_net_socket$ax25(0x3, 0x4000000000000003, 0x0)
connect$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom, 0x7}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x25dfdbfc}, @bcast, @remote, @rose, @netrom, @rose, @default]}, 0x48)

08:50:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0)

[  358.257088][    C1] net_ratelimit: 10 callbacks suppressed
[  358.257096][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  358.268578][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, 0x0)

08:50:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x1b}]}}}]}, 0x3c}}, 0x0)

08:50:21 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0)

08:50:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0xec8}}, 0x5000000)

08:50:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, 0x0)

08:50:21 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x40, 0x3, 0x3}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000080), 0x0}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000140), 0x0}, 0x18)

[  358.540304][T24550] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
08:50:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
splice(r0, &(0x7f0000000100), r1, &(0x7f0000000140), 0xffffffffffffff00, 0x8)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000500)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'L+', 0x6}, 0x28, 0x1)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
fcntl$dupfd(r0, 0x0, r1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8)
r2 = msgget(0x2, 0x40)
creat(&(0x7f0000000740)='./file0\x00', 0x40)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000680)=""/115)

08:50:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
recvmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8d}}], 0x1, 0x8000000000040, 0x0)

[  358.612174][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  358.629660][T24550] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
08:50:21 executing program 2:
unshare(0x400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000))
timerfd_gettime(r0, &(0x7f0000000080))

[  358.723320][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  358.737084][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  358.742881][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:21 executing program 4:
unshare(0x2000400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)

08:50:21 executing program 3:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:21 executing program 2:
unshare(0x400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000))
timerfd_gettime(r0, &(0x7f0000000080))

08:50:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070")
clock_getres(0x8, &(0x7f0000000180))

08:50:21 executing program 5:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fchdir(0xffffffffffffffff)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
geteuid()
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4)
umount2(0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000500), 0x4)
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:50:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$eventfd(r0, 0x0, 0x0)

08:50:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200))

08:50:21 executing program 2:
unshare(0x400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000))
timerfd_gettime(r0, &(0x7f0000000080))

08:50:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

08:50:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$eventfd(r0, 0x0, 0x0)

[  359.137305][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  359.143190][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200))

08:50:22 executing program 3:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$eventfd(r0, 0x0, 0x0)

08:50:22 executing program 2:
unshare(0x400)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000))
timerfd_gettime(r0, &(0x7f0000000080))

08:50:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200))

08:50:22 executing program 5:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

08:50:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
read$eventfd(r0, 0x0, 0x0)

08:50:22 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200))

08:50:22 executing program 0:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xff}, 0x1c)

08:50:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

08:50:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:22 executing program 3:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:22 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfc54)

[  359.755023][T24871] input: syz1 as /devices/virtual/input/input35
08:50:22 executing program 5:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

[  359.937995][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  359.944602][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:22 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)=@ll, 0x80, &(0x7f0000000680), 0x393}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0x7ffff000}], 0xd7, &(0x7f0000000300)=""/73, 0xfffffe91}}], 0x13bb39cc8b2e3f4, 0x0, 0x0)

08:50:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

[  360.072996][T24871] input: syz1 as /devices/virtual/input/input36
08:50:22 executing program 5:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:23 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 3:
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x80000)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x400040000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r0, r2, 0x0, 0x800000bf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose, 0x0, [@default, @null, @remote, @default, @netrom, @netrom, @remote, @rose]})
geteuid()
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')

08:50:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[  360.337086][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  360.342943][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:23 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[  360.491032][T25096] input: syz1 as /devices/virtual/input/input37
08:50:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

[  360.731602][T25205] input: syz1 as /devices/virtual/input/input38
[  360.829242][T25210] input: syz1 as /devices/virtual/input/input39
08:50:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:23 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:24 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:24 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d")
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180)
fchown(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00')
ftruncate(r2, 0x208200)
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000000))
futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:50:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:24 executing program 2:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x20000000000489)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000740)='s', 0x1}], 0x1)

08:50:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001980)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @multicast1}}]}, 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108)

08:50:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:24 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ipv6_route\x00')
readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/198, 0xc6}], 0x1)

08:50:24 executing program 3:
setrlimit(0x40000000000008, &(0x7f0000000000))
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000))
mlockall(0x3)

08:50:24 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x1000000000000a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$sock_int(r0, 0x1, 0x400000007, &(0x7f0000000040), 0x4)

08:50:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:24 executing program 2:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240))

08:50:24 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
close(0xffffffffffffffff)
r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x40)
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/groa\xb2\x00', 0x2761, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r2)

08:50:24 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x7, 0x0)

08:50:24 executing program 2:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, &(0x7f0000001640), 0x40080000002, 0x0)
r0 = gettid()
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0)
rt_tgsigqueueinfo(r0, r0, 0x32, &(0x7f0000000000))

08:50:24 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x1000000000000a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$sock_int(r0, 0x1, 0x400000007, &(0x7f0000000040), 0x4)

08:50:24 executing program 1:
r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x20})

08:50:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340))
geteuid()
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x6)
syz_emit_ethernet(0x55, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x1f, 0xffffff84, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "333ad7425b349d8b005f2d45c33c255d6e8818b5f18a9e"}}}}}}, 0x0)

[  361.704676][   T26] audit: type=1804 audit(1550047824.471:91): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F02726F75702E73746170 dev="ramfs" ino=62073 res=1
08:50:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='children\x00')
dup3(r1, r0, 0x80000)
r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2)
ioctl$BLKROSET(r2, 0x125d, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x4)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snapshot\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600), &(0x7f00000017c0)=0xc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)

08:50:24 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x1000000000000a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$sock_int(r0, 0x1, 0x400000007, &(0x7f0000000040), 0x4)

08:50:24 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x200000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x600]}, 0x8d}, 0x1c)

08:50:24 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
readahead(r0, 0x0, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
read(r1, &(0x7f0000000900)=""/4096, 0x1000)
ftruncate(r3, 0x80080)
sendfile(r2, r3, 0x0, 0x2008000fffffffd)

08:50:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340))
geteuid()
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x6)
syz_emit_ethernet(0x55, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x1f, 0xffffff84, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "333ad7425b349d8b005f2d45c33c255d6e8818b5f18a9e"}}}}}}, 0x0)

[  361.878576][T25386] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
08:50:24 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0)

08:50:25 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x1000000000000a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2)
setsockopt$sock_int(r0, 0x1, 0x400000007, &(0x7f0000000040), 0x4)

08:50:25 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x47d, &(0x7f0000007f80)=[{&(0x7f0000000100), 0x10224}], 0x1}, 0x0)

08:50:25 executing program 1:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@null, @remote, @default, @default, @netrom, @bcast, @bcast]}, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='.//ile0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x0, 0xfffffffffffffffb}, {0x8001}]}, 0x18, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')

08:50:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340))
geteuid()
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x6)
syz_emit_ethernet(0x55, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x1f, 0xffffff84, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "333ad7425b349d8b005f2d45c33c255d6e8818b5f18a9e"}}}}}}, 0x0)

08:50:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000004a00)='\x009\x93$\xcf\x92\xc3-\x02Wv\x90].ko\xb5\xae\x8a\xda3\xde\x0e\xd2\x14\xe1}\xe2\x14^\xc7;\x02b\xc0r\x00L\xce\xd5\xd0\x1c\xae\xfa\xd7\x19\xf54n\xaa\f\x8e3N\xfb1\x9aN\a\xc9\x9c\xf0\x97\xa2:\xb3\nXN\x99\xff\x01\xc5\x8d\xad\x16`\xc7}\xe9\x1e\xe4cO`\xb7\x7fI\xee\xed;\x9f\x13\xa0y\xdfQk\x8d\xb3\xa6\x04v\xdd\xa9`/')
fstat(r1, &(0x7f0000001540))

08:50:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0)

08:50:25 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000), 0x1c)
sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x37}], 0x10}}], 0x2, 0x0)

08:50:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340))
geteuid()
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x6)
syz_emit_ethernet(0x55, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x1f, 0xffffff84, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "333ad7425b349d8b005f2d45c33c255d6e8818b5f18a9e"}}}}}}, 0x0)

08:50:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000004a00)='\x009\x93$\xcf\x92\xc3-\x02Wv\x90].ko\xb5\xae\x8a\xda3\xde\x0e\xd2\x14\xe1}\xe2\x14^\xc7;\x02b\xc0r\x00L\xce\xd5\xd0\x1c\xae\xfa\xd7\x19\xf54n\xaa\f\x8e3N\xfb1\x9aN\a\xc9\x9c\xf0\x97\xa2:\xb3\nXN\x99\xff\x01\xc5\x8d\xad\x16`\xc7}\xe9\x1e\xe4cO`\xb7\x7fI\xee\xed;\x9f\x13\xa0y\xdfQk\x8d\xb3\xa6\x04v\xdd\xa9`/')
fstat(r1, &(0x7f0000001540))

08:50:25 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x47d, &(0x7f0000007f80)=[{&(0x7f0000000100), 0x10224}], 0x1}, 0x0)

08:50:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0)

08:50:25 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0xc)
r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x8000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)={&(0x7f00000001c0)='./file0\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
dup2(r2, r3)
read(r2, &(0x7f00000003c0)=""/85, 0xffc3)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x10}, 0x1c)
r4 = getpid()
fcntl$getownex(r3, 0x10, 0x0)
setpgid(r4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
add_key(&(0x7f0000000140)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="cb3ce264024febba8c5924be9bfe4e48aedd59f083d5b0cc7be4d39ea3a8", 0x1e, 0xfffffffffffffffd)
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000016c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4)
sendmsg$inet_sctp(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x800}, 0x8080)

08:50:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}})

08:50:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000004a00)='\x009\x93$\xcf\x92\xc3-\x02Wv\x90].ko\xb5\xae\x8a\xda3\xde\x0e\xd2\x14\xe1}\xe2\x14^\xc7;\x02b\xc0r\x00L\xce\xd5\xd0\x1c\xae\xfa\xd7\x19\xf54n\xaa\f\x8e3N\xfb1\x9aN\a\xc9\x9c\xf0\x97\xa2:\xb3\nXN\x99\xff\x01\xc5\x8d\xad\x16`\xc7}\xe9\x1e\xe4cO`\xb7\x7fI\xee\xed;\x9f\x13\xa0y\xdfQk\x8d\xb3\xa6\x04v\xdd\xa9`/')
fstat(r1, &(0x7f0000001540))

08:50:25 executing program 1:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@null, @remote, @default, @default, @netrom, @bcast, @bcast]}, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='.//ile0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x0, 0xfffffffffffffffb}, {0x8001}]}, 0x18, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')

08:50:25 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x47d, &(0x7f0000007f80)=[{&(0x7f0000000100), 0x10224}], 0x1}, 0x0)

08:50:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x100000001, 0x2, &(0x7f0000000180)="3c710002", 0x4)
listen(r0, 0x0)

[  363.148809][T25408] overlayfs: filesystem on './file0' not supported as upperdir
08:50:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000004a00)='\x009\x93$\xcf\x92\xc3-\x02Wv\x90].ko\xb5\xae\x8a\xda3\xde\x0e\xd2\x14\xe1}\xe2\x14^\xc7;\x02b\xc0r\x00L\xce\xd5\xd0\x1c\xae\xfa\xd7\x19\xf54n\xaa\f\x8e3N\xfb1\x9aN\a\xc9\x9c\xf0\x97\xa2:\xb3\nXN\x99\xff\x01\xc5\x8d\xad\x16`\xc7}\xe9\x1e\xe4cO`\xb7\x7fI\xee\xed;\x9f\x13\xa0y\xdfQk\x8d\xb3\xa6\x04v\xdd\xa9`/')
fstat(r1, &(0x7f0000001540))

08:50:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0)

08:50:25 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x7a, &(0x7f0000000b00)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x3001, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501}}}}}}}, 0x0)

08:50:26 executing program 4:
r0 = memfd_create(&(0x7f0000000740)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})

08:50:26 executing program 3:
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x7}, 0x8)

[  363.297086][    C0] net_ratelimit: 10 callbacks suppressed
[  363.297093][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  363.308549][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:26 executing program 3:
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
chown(&(0x7f0000000000)='./file0\x00', r1, r2)

08:50:26 executing program 4:
r0 = memfd_create(&(0x7f0000000740)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})

08:50:26 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_tcp_int(r0, 0x6, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'team0\x00', {0x2, 0x0, @dev}})
write(r0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3f, 0x0, 0x3fff80, 0x9, 0xfff})
getuid()
lsetxattr$security_capability(0x0, &(0x7f0000000580)='security.capability\x00', &(0x7f00000005c0)=@v2={0x2000000, [{0x5e8, 0x7}, {0x9, 0xfffffffffffffffe}]}, 0xfffffffffffffceb, 0x2)
open(&(0x7f0000000280)='./file1\x00', 0x200, 0x10)

08:50:26 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGKEYCODE(r0, 0x40104593, &(0x7f0000000140)=""/106)

08:50:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x80200, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000780)={<r3=>0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000240)=0x84)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=<r4=>0x0)
setpriority(0x3, r4, 0x8f62)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x3}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000c00)}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, 0x0)
mount$overlay(0x404000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r2, 0x4b2f, 0xff)
setxattr$security_smack_entry(0x0, &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2)
recvfrom$rxrpc(r1, &(0x7f0000000680)=""/72, 0x48, 0x103, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340), 0x4)
sendto(r2, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2", 0x6e, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0)

08:50:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$LOOP_SET_FD(r1, 0x5432, 0xffffffffffffffff)

08:50:26 executing program 4:
r0 = memfd_create(&(0x7f0000000740)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})

08:50:26 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7)

08:50:26 executing program 1:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@null, @remote, @default, @default, @netrom, @bcast, @bcast]}, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='.//ile0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x0, 0xfffffffffffffffb}, {0x8001}]}, 0x18, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')

08:50:26 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x47d, &(0x7f0000007f80)=[{&(0x7f0000000100), 0x10224}], 0x1}, 0x0)

08:50:26 executing program 4:
r0 = memfd_create(&(0x7f0000000740)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})

08:50:26 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x0, 0x0)
sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x8}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240))

08:50:26 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8)
r2 = epoll_create1(0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x110}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0)

08:50:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
sendto$inet(r0, &(0x7f0000000400)="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", 0x6c1, 0x0, 0x0, 0x0)

08:50:26 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000001d00)=""/68, 0x44}], 0x1)

08:50:26 executing program 4:
getpgid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x3, 0x182)
pipe(&(0x7f00000004c0))
r1 = memfd_create(&(0x7f0000000140)='t\bnu\xf7\xff\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r2, &(0x7f00000077c0)=[{{&(0x7f0000005a80)=@isdn, 0x80, &(0x7f0000002c00)=[{&(0x7f0000005b00)=""/92, 0x5c}, {&(0x7f0000005b80)=""/197, 0xc5}], 0x2}, 0x1}, {{&(0x7f0000005c80)=@xdp, 0xffffffae, &(0x7f0000005f00)=[{&(0x7f0000005d00)=""/97, 0x61}, {&(0x7f0000005d80)=""/171, 0xab}, {&(0x7f0000005e40)=""/128, 0x80}, {&(0x7f0000005ec0)}], 0x4, &(0x7f0000005f40)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x6d, &(0x7f0000006500)=[{&(0x7f0000006080)=""/99, 0x63}, {&(0x7f0000006100)=""/254, 0xfe}, {&(0x7f0000006200)=""/136, 0x88}, {&(0x7f00000062c0)=""/115, 0x73}, {&(0x7f0000006340)=""/117, 0x75}, {&(0x7f00000063c0)=""/63, 0x3f}, {&(0x7f0000006400)=""/106, 0xff64}, {&(0x7f0000006480)=""/128, 0x80}], 0x8, &(0x7f0000006580)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000007580)=@x25={0x9, @remote}, 0x80, &(0x7f0000007780)=[{&(0x7f0000007600)=""/144, 0x90}, {&(0x7f00000076c0)=""/135, 0x87}], 0x2}, 0x1}], 0x4, 0x103, &(0x7f00000078c0))

08:50:26 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910800000b00140003000c00060000001900154002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1}, 0x0)

[  363.958477][T25924] netlink: 'syz-executor.2': attribute type 20 has an invalid length.
[  363.982998][T25924] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
08:50:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x4, {0x0, 0x100000000, 0x5}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x2, 0x5, 0x4, &(0x7f0000ffc000/0x1000)=nil, 0x4})
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r2 = shmget(0x2, 0x2000, 0x78001218, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000400)={0x3000000000000000, 0x3000, 0x10000000, 0x2, 0xa})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28)
fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f0000000680), &(0x7f0000000780), &(0x7f00000007c0))
mount$9p_tcp(&(0x7f0000000540)='127.0.0.1\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x800, &(0x7f0000000800)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@aname={'aname', 0x3d, '/dev/mixer\x00'}}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0xe4}}, {@access_client='access=client'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp#\x00'}}]}})
setxattr$security_evm(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=@v2={0x7, 0x1, 0x8, 0x3ff, 0xc8, "6300b188b5f2b5650ee74b4b2c5e00eee824d4272536afa67763000da8637ea0e66b1e7eaaac56782aa0af7f003e1fd536df841789ec5bf0a6107adf742467833496793f6f934eb3a7250460bde92edc46b12b586937654e4eb9d12d14e720d93269795cd30ee61538c3b7b6d50a483fd219323a5ce2df0554dac4ea80edcac78441108d7cf33668bc82358fba1f1efe0e0a2dc0428c3edbf31951391daed83216367953f5e38378afbafd4ecdbc86b09580e5b64115bd5fd2144871331fa2762958573cb103ca10"}, 0xd2, 0x0)

[  364.004099][T25924] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'.
08:50:26 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

08:50:26 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[  364.097847][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  364.104397][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r3 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x4}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000008c0)={0x6, [<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f0000006498447cccdcc4634061c273d4aab36de11a54c2020a55446cce30e183319a614fec0c128a43e04ef7b4c69d3816bccc1ee68b52402cfdfd897033a68af59b249a1443f9bc9e53a7f62a7c478d7d34b63b6a87fc6ba5063fdf9e521089855074da517bf3401601cedaa68ab02fd7ccaa9fe88f100373d32b1c1635d0eb1d9483ab1d52dfe2bfe643b6f8a1f7ffa2c16852bfcfc37816cd058d1c3d2aa8549968986f6e09784ab5fd60a1b8c148"], 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x124}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8001, 0x8, 0x8, 0x99d9, 0x210176a254e944e5}, &(0x7f0000004b40)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000004b80)={0x7, 0x2, 0x200, 0xff, 0x100000000, 0x1f, 0x6, 0x10001}, &(0x7f0000004bc0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000004e40)={0x0, 0x1000}, &(0x7f0000004e80)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000008380)={0x0, 0x6, 0xfff}, &(0x7f00000083c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000008580), &(0x7f00000085c0)=0x4)
sendmmsg$inet_sctp(r3, &(0x7f0000008680)=[{&(0x7f00000084c0)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x8}, 0x1c, &(0x7f0000008540)=[{&(0x7f0000008500)="f9ba913a31ae0eebb10d3cc33865e4028b565a5140bff4b113fa2a015097517caa48c061f3556f08b6af64e69517ba9b0eff74", 0x33}], 0x1, 0x0, 0x0, 0x4008844}], 0x1, 0x8c0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000001c0)={0xd, 0x8, {0x595b312a36558a09, 0x6, 0xae2e, {0x9, 0xeb9e}, {0x0, 0x8}, @rumble={0x7, 0x101}}, {0x57, 0xdff9, 0x6, {0x1f, 0xfff}, {0x9, 0x5}, @cond=[{0x7, 0x3, 0x1, 0x349519da, 0x2, 0x5}, {0xed, 0xb7e, 0x3, 0x0, 0x8, 0x1}]}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})
dup3(r3, r2, 0x0)

08:50:26 executing program 1:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@null, @remote, @default, @default, @netrom, @bcast, @bcast]}, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='.//ile0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x0, 0xfffffffffffffffb}, {0x8001}]}, 0x18, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')

08:50:27 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x4, {0x0, 0x100000000, 0x5}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x2, 0x5, 0x4, &(0x7f0000ffc000/0x1000)=nil, 0x4})
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r2 = shmget(0x2, 0x2000, 0x78001218, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000400)={0x3000000000000000, 0x3000, 0x10000000, 0x2, 0xa})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28)
fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f0000000680), &(0x7f0000000780), &(0x7f00000007c0))
mount$9p_tcp(&(0x7f0000000540)='127.0.0.1\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x800, &(0x7f0000000800)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@aname={'aname', 0x3d, '/dev/mixer\x00'}}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0xe4}}, {@access_client='access=client'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp#\x00'}}]}})
setxattr$security_evm(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=@v2={0x7, 0x1, 0x8, 0x3ff, 0xc8, "6300b188b5f2b5650ee74b4b2c5e00eee824d4272536afa67763000da8637ea0e66b1e7eaaac56782aa0af7f003e1fd536df841789ec5bf0a6107adf742467833496793f6f934eb3a7250460bde92edc46b12b586937654e4eb9d12d14e720d93269795cd30ee61538c3b7b6d50a483fd219323a5ce2df0554dac4ea80edcac78441108d7cf33668bc82358fba1f1efe0e0a2dc0428c3edbf31951391daed83216367953f5e38378afbafd4ecdbc86b09580e5b64115bd5fd2144871331fa2762958573cb103ca10"}, 0xd2, 0x0)

08:50:27 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x80200, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
setpriority(0x0, r2, 0x8f62)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r1, 0x4b2f, 0xff)
recvfrom$rxrpc(r0, &(0x7f0000000680)=""/72, 0x48, 0x103, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendto(r1, &(0x7f0000000580), 0x0, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

[  364.244930][T26025] bridge0: port 3(gretap0) entered disabled state
[  364.252330][T26025] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.261991][T26025] bridge0: port 1(bridge_slave_0) entered disabled state
08:50:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x86dd, 'caif0\x00', 'veth1_to_team\x00', 'syzkaller1\x00', 'veth1_to_team\x00', @remote, [], @link_local, [], 0xe8, 0xe8, 0x118, [@ip6={'ip6\x00', 0x50, {{@dev, @ipv4={[], [], @initdev}, [], [], 0x0, 0x3a, 0x40}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x220)

08:50:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

08:50:27 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x80200, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
setpriority(0x0, r2, 0x8f62)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r1, 0x4b2f, 0xff)
recvfrom$rxrpc(r0, &(0x7f0000000680)=""/72, 0x48, 0x103, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendto(r1, &(0x7f0000000580), 0x0, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

[  364.497170][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  364.502983][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:27 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x4, {0x0, 0x100000000, 0x5}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x2, 0x5, 0x4, &(0x7f0000ffc000/0x1000)=nil, 0x4})
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r2 = shmget(0x2, 0x2000, 0x78001218, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000400)={0x3000000000000000, 0x3000, 0x10000000, 0x2, 0xa})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28)
fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f0000000680), &(0x7f0000000780), &(0x7f00000007c0))
mount$9p_tcp(&(0x7f0000000540)='127.0.0.1\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x800, &(0x7f0000000800)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@aname={'aname', 0x3d, '/dev/mixer\x00'}}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0xe4}}, {@access_client='access=client'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp#\x00'}}]}})
setxattr$security_evm(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=@v2={0x7, 0x1, 0x8, 0x3ff, 0xc8, "6300b188b5f2b5650ee74b4b2c5e00eee824d4272536afa67763000da8637ea0e66b1e7eaaac56782aa0af7f003e1fd536df841789ec5bf0a6107adf742467833496793f6f934eb3a7250460bde92edc46b12b586937654e4eb9d12d14e720d93269795cd30ee61538c3b7b6d50a483fd219323a5ce2df0554dac4ea80edcac78441108d7cf33668bc82358fba1f1efe0e0a2dc0428c3edbf31951391daed83216367953f5e38378afbafd4ecdbc86b09580e5b64115bd5fd2144871331fa2762958573cb103ca10"}, 0xd2, 0x0)

08:50:27 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x80200, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
setpriority(0x0, r2, 0x8f62)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r1, 0x4b2f, 0xff)
recvfrom$rxrpc(r0, &(0x7f0000000680)=""/72, 0x48, 0x103, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendto(r1, &(0x7f0000000580), 0x0, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

08:50:27 executing program 1:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0ae927023c123f3188a070")
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x8})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  364.977624][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  364.983799][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  365.377126][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  365.382926][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:28 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

08:50:28 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x4, {0x0, 0x100000000, 0x5}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x2, 0x5, 0x4, &(0x7f0000ffc000/0x1000)=nil, 0x4})
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r2 = shmget(0x2, 0x2000, 0x78001218, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000400)={0x3000000000000000, 0x3000, 0x10000000, 0x2, 0xa})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28)
fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f0000000680), &(0x7f0000000780), &(0x7f00000007c0))
mount$9p_tcp(&(0x7f0000000540)='127.0.0.1\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x800, &(0x7f0000000800)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@aname={'aname', 0x3d, '/dev/mixer\x00'}}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0xe4}}, {@access_client='access=client'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp#\x00'}}]}})
setxattr$security_evm(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=@v2={0x7, 0x1, 0x8, 0x3ff, 0xc8, "6300b188b5f2b5650ee74b4b2c5e00eee824d4272536afa67763000da8637ea0e66b1e7eaaac56782aa0af7f003e1fd536df841789ec5bf0a6107adf742467833496793f6f934eb3a7250460bde92edc46b12b586937654e4eb9d12d14e720d93269795cd30ee61538c3b7b6d50a483fd219323a5ce2df0554dac4ea80edcac78441108d7cf33668bc82358fba1f1efe0e0a2dc0428c3edbf31951391daed83216367953f5e38378afbafd4ecdbc86b09580e5b64115bd5fd2144871331fa2762958573cb103ca10"}, 0xd2, 0x0)

08:50:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r3 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x4}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000008c0)={0x6, [<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f0000006498447cccdcc4634061c273d4aab36de11a54c2020a55446cce30e183319a614fec0c128a43e04ef7b4c69d3816bccc1ee68b52402cfdfd897033a68af59b249a1443f9bc9e53a7f62a7c478d7d34b63b6a87fc6ba5063fdf9e521089855074da517bf3401601cedaa68ab02fd7ccaa9fe88f100373d32b1c1635d0eb1d9483ab1d52dfe2bfe643b6f8a1f7ffa2c16852bfcfc37816cd058d1c3d2aa8549968986f6e09784ab5fd60a1b8c148"], 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x124}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8001, 0x8, 0x8, 0x99d9, 0x210176a254e944e5}, &(0x7f0000004b40)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000004b80)={0x7, 0x2, 0x200, 0xff, 0x100000000, 0x1f, 0x6, 0x10001}, &(0x7f0000004bc0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000004e40)={0x0, 0x1000}, &(0x7f0000004e80)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000008380)={0x0, 0x6, 0xfff}, &(0x7f00000083c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000008580), &(0x7f00000085c0)=0x4)
sendmmsg$inet_sctp(r3, &(0x7f0000008680)=[{&(0x7f00000084c0)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x8}, 0x1c, &(0x7f0000008540)=[{&(0x7f0000008500)="f9ba913a31ae0eebb10d3cc33865e4028b565a5140bff4b113fa2a015097517caa48c061f3556f08b6af64e69517ba9b0eff74", 0x33}], 0x1, 0x0, 0x0, 0x4008844}], 0x1, 0x8c0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000001c0)={0xd, 0x8, {0x595b312a36558a09, 0x6, 0xae2e, {0x9, 0xeb9e}, {0x0, 0x8}, @rumble={0x7, 0x101}}, {0x57, 0xdff9, 0x6, {0x1f, 0xfff}, {0x9, 0x5}, @cond=[{0x7, 0x3, 0x1, 0x349519da, 0x2, 0x5}, {0xed, 0xb7e, 0x3, 0x0, 0x8, 0x1}]}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})
dup3(r3, r2, 0x0)

08:50:28 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x80200, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
setpriority(0x0, r2, 0x8f62)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r1, 0x4b2f, 0xff)
recvfrom$rxrpc(r0, &(0x7f0000000680)=""/72, 0x48, 0x103, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendto(r1, &(0x7f0000000580), 0x0, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

08:50:28 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24040881}, 0x40010)
close(r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x100)
prlimit64(r4, 0xf, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000180))
syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0)
syz_open_pts(r5, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
write(r5, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

[  365.995806][T26181] bridge0: port 3(gretap0) entered blocking state
[  366.002777][T26181] bridge0: port 3(gretap0) entered forwarding state
[  366.010855][T26181] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.018298][T26181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.026636][T26181] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.034123][T26181] bridge0: port 1(bridge_slave_0) entered forwarding state
08:50:28 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

[  366.048054][T26181] device bridge0 entered promiscuous mode
08:50:28 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

08:50:29 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40})
syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

08:50:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r3 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x4}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000008c0)={0x6, [<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f0000006498447cccdcc4634061c273d4aab36de11a54c2020a55446cce30e183319a614fec0c128a43e04ef7b4c69d3816bccc1ee68b52402cfdfd897033a68af59b249a1443f9bc9e53a7f62a7c478d7d34b63b6a87fc6ba5063fdf9e521089855074da517bf3401601cedaa68ab02fd7ccaa9fe88f100373d32b1c1635d0eb1d9483ab1d52dfe2bfe643b6f8a1f7ffa2c16852bfcfc37816cd058d1c3d2aa8549968986f6e09784ab5fd60a1b8c148"], 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x124}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8001, 0x8, 0x8, 0x99d9, 0x210176a254e944e5}, &(0x7f0000004b40)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000004b80)={0x7, 0x2, 0x200, 0xff, 0x100000000, 0x1f, 0x6, 0x10001}, &(0x7f0000004bc0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000004e40)={0x0, 0x1000}, &(0x7f0000004e80)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000008380)={0x0, 0x6, 0xfff}, &(0x7f00000083c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000008580), &(0x7f00000085c0)=0x4)
sendmmsg$inet_sctp(r3, &(0x7f0000008680)=[{&(0x7f00000084c0)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x8}, 0x1c, &(0x7f0000008540)=[{&(0x7f0000008500)="f9ba913a31ae0eebb10d3cc33865e4028b565a5140bff4b113fa2a015097517caa48c061f3556f08b6af64e69517ba9b0eff74", 0x33}], 0x1, 0x0, 0x0, 0x4008844}], 0x1, 0x8c0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000001c0)={0xd, 0x8, {0x595b312a36558a09, 0x6, 0xae2e, {0x9, 0xeb9e}, {0x0, 0x8}, @rumble={0x7, 0x101}}, {0x57, 0xdff9, 0x6, {0x1f, 0xfff}, {0x9, 0x5}, @cond=[{0x7, 0x3, 0x1, 0x349519da, 0x2, 0x5}, {0xed, 0xb7e, 0x3, 0x0, 0x8, 0x1}]}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})
dup3(r3, r2, 0x0)

08:50:29 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

[  366.506618][T26296] bridge0: port 3(gretap0) entered disabled state
[  366.513795][T26296] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.521518][T26296] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.533676][T26296] device bridge0 left promiscuous mode
08:50:29 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

08:50:30 executing program 1:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

08:50:30 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000640)='TIPC\x00\';c\xfe\x82\x13\x19\x03\xfb\xebn*\xb4o\xb6\xdb$U\xcd\x85\xb6:=&G8\xde\x8c\xe6%\x1a\xb5%h\x94.\x97\x9aO\xd4\x03\xc1\xce\xdd\xac:\x7f_\xd1\xc8\xc0\xc85\xf0\xef\xaeqcDz\xd9q\xee\'(i\x96B\"\x81\xa3\xf9\xa9`\xe2\\\xfa\xa5\x95\xc08\x05e\xf6\xf2\xb4\xdb\xfc\xc3>q~L\x98\xd7\x84\x9b\xef\xf7$\xd1\x86f\x9c\x03A\x03-\xd1\x9b\xf3', 0x0)
write(r1, &(0x7f0000000100)="0fca", 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2}}}, 0x90)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000))

[  367.813771][   T26] audit: type=1800 audit(1550047830.581:92): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17089 res=0
08:50:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r3 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x4}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000008c0)={0x6, [<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f0000006498447cccdcc4634061c273d4aab36de11a54c2020a55446cce30e183319a614fec0c128a43e04ef7b4c69d3816bccc1ee68b52402cfdfd897033a68af59b249a1443f9bc9e53a7f62a7c478d7d34b63b6a87fc6ba5063fdf9e521089855074da517bf3401601cedaa68ab02fd7ccaa9fe88f100373d32b1c1635d0eb1d9483ab1d52dfe2bfe643b6f8a1f7ffa2c16852bfcfc37816cd058d1c3d2aa8549968986f6e09784ab5fd60a1b8c148"], 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x124}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8001, 0x8, 0x8, 0x99d9, 0x210176a254e944e5}, &(0x7f0000004b40)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000004b80)={0x7, 0x2, 0x200, 0xff, 0x100000000, 0x1f, 0x6, 0x10001}, &(0x7f0000004bc0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000004e40)={0x0, 0x1000}, &(0x7f0000004e80)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000008380)={0x0, 0x6, 0xfff}, &(0x7f00000083c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000008580), &(0x7f00000085c0)=0x4)
sendmmsg$inet_sctp(r3, &(0x7f0000008680)=[{&(0x7f00000084c0)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x8}, 0x1c, &(0x7f0000008540)=[{&(0x7f0000008500)="f9ba913a31ae0eebb10d3cc33865e4028b565a5140bff4b113fa2a015097517caa48c061f3556f08b6af64e69517ba9b0eff74", 0x33}], 0x1, 0x0, 0x0, 0x4008844}], 0x1, 0x8c0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801}, 0x0)
semget$private(0x0, 0x4, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000001c0)={0xd, 0x8, {0x595b312a36558a09, 0x6, 0xae2e, {0x9, 0xeb9e}, {0x0, 0x8}, @rumble={0x7, 0x101}}, {0x57, 0xdff9, 0x6, {0x1f, 0xfff}, {0x9, 0x5}, @cond=[{0x7, 0x3, 0x1, 0x349519da, 0x2, 0x5}, {0xed, 0xb7e, 0x3, 0x0, 0x8, 0x1}]}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})
dup3(r3, r2, 0x0)

[  367.846151][   T26] audit: type=1804 audit(1550047830.601:93): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir132959106/syzkaller.Pi2oIX/381/file0" dev="sda1" ino=17089 res=1
08:50:30 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00W\x1fN\xf4\x93\x12R\xc9#P\x8d\x98\xf1', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100004)

08:50:30 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
read$FUSE(r0, &(0x7f0000000740), 0x1000)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s'])
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10)

08:50:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_vs\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x40000000000009)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  367.958396][T26420] bridge0: port 3(gretap0) entered blocking state
[  367.965181][T26420] bridge0: port 3(gretap0) entered forwarding state
[  367.972962][T26420] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.980405][T26420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.989107][T26420] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.996603][T26420] bridge0: port 1(bridge_slave_0) entered forwarding state
08:50:30 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40})
syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

08:50:30 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x47}}, &(0x7f0000000480)='syzkaller\x00'}, 0x48)

[  368.086226][T26420] device bridge0 entered promiscuous mode
08:50:30 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00W\x1fN\xf4\x93\x12R\xc9#P\x8d\x98\xf1', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100004)

08:50:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc256, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000f00000000a30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)

08:50:31 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00W\x1fN\xf4\x93\x12R\xc9#P\x8d\x98\xf1', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100004)

08:50:31 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000001, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5c97b5d4d7b0300b1fccd901812c9c56a76a3dbf4cc70a8c9b840bb0cedbb856e335d3cec11e09b913a8fcc6e777fa991fd28da6f87ce457c28d3170c6f3cf", 0x37}, 0x60)

[  368.644968][   T26] audit: type=1804 audit(1550047831.411:94): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir132959106/syzkaller.Pi2oIX/381/file0" dev="sda1" ino=17089 res=1
[  368.669667][    C1] net_ratelimit: 10 callbacks suppressed
[  368.669675][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  368.669717][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:31 executing program 5:
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x165)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x9, 0xe3ce, 0xfff, 'queue0\x00', 0x2})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="08800000513883b40a769c017e7ca3ab391ae435ac5c13422c3e47a70deecf511cf7a0643fe264fd3005c927c842607cc7e1a2a2d53fbc68d2e7fd04eff157489058327b6a9ea33aff37575c02dede7c17531c36e10962f9d443", @ANYRES32=0x0], 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x80104592, 0xffffffffffffffff)
splice(r0, 0x0, r1, 0x0, 0x27a8c300, 0x4)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000440)={{}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'})
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6bee)

08:50:31 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f00000000c0)='v\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x26118}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

08:50:31 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00W\x1fN\xf4\x93\x12R\xc9#P\x8d\x98\xf1', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100004)

08:50:31 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40})
syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

08:50:31 executing program 1:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

08:50:31 executing program 0:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:31 executing program 4:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

[  368.960497][   T26] audit: type=1800 audit(1550047831.731:95): pid=26568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17073 res=0
[  369.005074][   T26] audit: type=1804 audit(1550047831.731:96): pid=26568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir132959106/syzkaller.Pi2oIX/382/file0" dev="sda1" ino=17073 res=1
[  369.124581][   T26] audit: type=1800 audit(1550047831.861:97): pid=26676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17105 res=0
[  369.137662][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  369.151801][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  369.160889][   T26] audit: type=1804 audit(1550047831.881:98): pid=26676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir948274113/syzkaller.l41CZN/343/file0" dev="sda1" ino=17105 res=1
[  369.182623][T26558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:50:32 executing program 5:
openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x14, 0x0, 0x0, 0x1ac, 0x0, 0x2, 0x0, 0x5]}})
syz_open_procfs(0x0, &(0x7f0000000280)='net\x00')
ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000100))
flistxattr(r1, &(0x7f00000001c0)=""/171, 0xab)
r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)

[  369.537761][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  369.544135][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  369.566583][ T7560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  369.624841][T26681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:50:32 executing program 0:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:32 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40})
syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

08:50:32 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f00000000c0)='v\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x26118}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

08:50:32 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:32 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

[  370.012925][T26792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:50:32 executing program 0:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:32 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:33 executing program 1:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

[  370.337107][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  370.342960][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:33 executing program 4:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

08:50:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
pipe2(0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c)

08:50:33 executing program 5:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000100))

08:50:33 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f00000000c0)='v\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x26118}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[  370.475921][   T26] audit: type=1800 audit(1550047833.241:99): pid=26816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17121 res=0
[  370.546255][   T26] audit: type=1800 audit(1550047833.271:100): pid=26820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17137 res=0
08:50:33 executing program 5:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10)

[  370.682331][T26924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  370.699585][   T26] audit: type=1804 audit(1550047833.271:101): pid=26816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir132959106/syzkaller.Pi2oIX/383/file0" dev="sda1" ino=17121 res=1
[  370.737075][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  370.743115][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:33 executing program 5:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10)

08:50:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
pipe2(0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c)

08:50:33 executing program 5:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10)

08:50:33 executing program 0:
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x1, 0x4]})
getegid()
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="af45b7f952ee68d121fd0a40", 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[], 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x7, 0x4d3}, 0xfffffffffffffe22)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/133, 0x85)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xfffffff)
open(0x0, 0x20000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f0000000000)=0x3)

08:50:34 executing program 5:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10)

08:50:34 executing program 2:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f00000000c0)='v\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x26118}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[  371.498540][T26944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:50:34 executing program 1:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

08:50:34 executing program 4:
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
r0 = open(&(0x7f0000000240)='./file1\x00', 0xd40beb2474dfd229, 0xc)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x11d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60)
getrlimit(0x0, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00'})
stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840))
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f9fb20b10570467d5682f")
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x121000, 0x0)
shutdown(r0, 0x1)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000600)={&(0x7f0000000380)="bdf9dc133525871d34e1651a20c8ab3264283250cebb46822c83bae60aae85ffd193520b93c3395482a832a3a0e010e97679eaf00f2b9ca2dfbfdfe1ff5a512bd8a6f5de1880473c9a9f", 0x4a})

08:50:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x0, 0x0, 0x40000081]})

08:50:34 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
pipe2(0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c)

08:50:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
setgroups(0x2, &(0x7f0000000440)=[0x0, 0x0])
getgroups(0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01])

08:50:34 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

08:50:34 executing program 0:
lstat(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1)

08:50:34 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x101, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r2, r3})
recvmmsg(r4, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x63, 0x400002fd, 0x0)
socket$inet6(0xa, 0x2, 0x0)

08:50:34 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev={0xfe, 0x9500, [0x0, 0x0, 0xf0ffff]}, @local, {[], @icmpv6=@echo_request}}}}}, 0x0)

08:50:34 executing program 0:
lstat(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1)

08:50:35 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000018"])

08:50:35 executing program 0:
lstat(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1)

08:50:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
pipe2(0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c)

08:50:35 executing program 0:
lstat(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1)

08:50:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0x80045505, &(0x7f0000000240))

08:50:35 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x101, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r2, r3})
recvmmsg(r4, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x63, 0x400002fd, 0x0)
socket$inet6(0xa, 0x2, 0x0)

08:50:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x17e)

08:50:35 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x7ff, 0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x4, r3}, 0x10)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001700))
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x2e, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="4316bbb6423ec0de28d1204d550583b64031c52b40250e0ee3cef9e091fc6bf8814da50395d741c9163683777903416dea02ed0559bcac061c3fcda1827763005e99fbb8a91d06754810a8126f4bb8ed38ee7aca5b7922192de7b77c62a6d509aa441fb89045e4750bad039844227a3545fb69d8620ebab38c41b2b705c710bf2b6404952d43011e3744a2fa6080f62540427bba50c7f70645f844879f836ca2107de3ed", 0xa4, 0x3}, {0x0, 0x0, 0x80000001}], 0x40001, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180))

08:50:35 executing program 4:
prctl$PR_CAPBSET_DROP(0x18, 0x0)
capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x57b5c425})

08:50:35 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00')
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
lstat(0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x10200, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x4207, r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)
write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_SET(0x0, 0x1, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={0x0})

08:50:35 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x8, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000004ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

08:50:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x17e)

08:50:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070")
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000280)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x38, 0x0, 0x7, "07240f0300013c14eda95340ed7ed5c9e82fc03e83481540fecc30356e9c19e16c"}], 0x38}, 0x0)

08:50:35 executing program 0:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0)

08:50:35 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4)
sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e300"}], 0x28}}], 0x1, 0x0)

08:50:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x17e)

08:50:36 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x101, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r2, r3})
recvmmsg(r4, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x63, 0x400002fd, 0x0)
socket$inet6(0xa, 0x2, 0x0)

08:50:36 executing program 0:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0)

08:50:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x17e)

08:50:36 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x7ff, 0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x4, r3}, 0x10)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001700))
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x2e, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="4316bbb6423ec0de28d1204d550583b64031c52b40250e0ee3cef9e091fc6bf8814da50395d741c9163683777903416dea02ed0559bcac061c3fcda1827763005e99fbb8a91d06754810a8126f4bb8ed38ee7aca5b7922192de7b77c62a6d509aa441fb89045e4750bad039844227a3545fb69d8620ebab38c41b2b705c710bf2b6404952d43011e3744a2fa6080f62540427bba50c7f70645f844879f836ca2107de3ed", 0xa4, 0x3}, {0x0, 0x0, 0x80000001}], 0x40001, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180))

08:50:36 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @loopback}, 'ip6_vti0\x00'})

08:50:36 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:36 executing program 1:
syslog(0x2, &(0x7f0000000040)=""/57, 0xff1f)

08:50:36 executing program 0:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0)

08:50:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
dup2(r0, r2)

08:50:36 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x101, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r2, r3})
recvmmsg(r4, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x63, 0x400002fd, 0x0)
socket$inet6(0xa, 0x2, 0x0)

08:50:36 executing program 0:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0)

08:50:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2)
fallocate(r0, 0x3, 0x0, 0x7fffffff)

08:50:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(0x0, 0x100000000, 0x0)
mremap(&(0x7f0000d99000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlockall()
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x10000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')

08:50:36 executing program 0:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0)

[  373.697095][    C0] net_ratelimit: 10 callbacks suppressed
[  373.697102][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  373.708581][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:36 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:36 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x7ff, 0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x4, r3}, 0x10)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001700))
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x2e, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="4316bbb6423ec0de28d1204d550583b64031c52b40250e0ee3cef9e091fc6bf8814da50395d741c9163683777903416dea02ed0559bcac061c3fcda1827763005e99fbb8a91d06754810a8126f4bb8ed38ee7aca5b7922192de7b77c62a6d509aa441fb89045e4750bad039844227a3545fb69d8620ebab38c41b2b705c710bf2b6404952d43011e3744a2fa6080f62540427bba50c7f70645f844879f836ca2107de3ed", 0xa4, 0x3}, {0x0, 0x0, 0x80000001}], 0x40001, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180))

08:50:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2)
fallocate(r0, 0x3, 0x0, 0x7fffffff)

08:50:36 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2)
fallocate(r0, 0x3, 0x0, 0x7fffffff)

08:50:36 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0xfffff83}}], 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
preadv(r1, &(0x7f0000000140), 0x391, 0x51)

08:50:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(0x0, 0x100000000, 0x0)
mremap(&(0x7f0000d99000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlockall()
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x10000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')

08:50:36 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2)
fallocate(r0, 0x3, 0x0, 0x7fffffff)

08:50:36 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:36 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(0x0, 0x100000000, 0x0)
mremap(&(0x7f0000d99000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlockall()
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x10000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')

08:50:37 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x800001000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@empty, @multicast2, @dev}, 0xc)
getsockopt$packet_buf(r1, 0x111, 0x4000000001, 0x0, &(0x7f0000000100))

08:50:37 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:37 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x7ff, 0x4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x4, r3}, 0x10)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001700))
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x2e, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="4316bbb6423ec0de28d1204d550583b64031c52b40250e0ee3cef9e091fc6bf8814da50395d741c9163683777903416dea02ed0559bcac061c3fcda1827763005e99fbb8a91d06754810a8126f4bb8ed38ee7aca5b7922192de7b77c62a6d509aa441fb89045e4750bad039844227a3545fb69d8620ebab38c41b2b705c710bf2b6404952d43011e3744a2fa6080f62540427bba50c7f70645f844879f836ca2107de3ed", 0xa4, 0x3}, {0x0, 0x0, 0x80000001}], 0x40001, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180))

08:50:37 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x630400, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xa, 0x2, 0x0, 0x1}, 0x2c)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680))
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2})
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved})

08:50:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(0x0, 0x100000000, 0x0)
mremap(&(0x7f0000d99000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlockall()
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x10000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')

08:50:37 executing program 4:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:37 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='X'], 0x1)
perf_event_open(&(0x7f0000000040)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:37 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

[  374.497078][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  374.503020][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  374.514929][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  374.514946][   T26] audit: type=1800 audit(1550047837.281:107): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=4 res=0
08:50:37 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010001d00", 0x24)

08:50:37 executing program 5:
bind$ax25(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
read(r0, &(0x7f00000002c0)=""/131, 0x83)
write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a)

08:50:37 executing program 1:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

08:50:37 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c5e00000400000000000100000000634a16d15fd7085d00e4ff38000000000018b7074d94b0cb5a8531eb2a5bd40008"], 0x32)

[  374.732605][   T26] audit: type=1804 audit(1550047837.321:108): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir948274113/syzkaller.l41CZN/356/file0/file0" dev="loop4" ino=4 res=1
08:50:37 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0)
r1 = gettid()
pread64(r0, &(0x7f0000000240)=""/216, 0xd8, 0x0)
timer_create(0x0, &(0x7f0000000600)={0x0, 0x12}, &(0x7f0000000580))
close(r0)
memfd_create(&(0x7f0000000080)='cgroup\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

08:50:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000380)="0af51f023c123f3188a070")
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8), 0x8, 0x0)
poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x2)

[  374.761884][   T26] audit: type=1804 audit(1550047837.491:109): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir948274113/syzkaller.l41CZN/356/file0/file0" dev="loop4" ino=4 res=1
[  374.790023][   T26] audit: type=1804 audit(1550047837.491:110): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir948274113/syzkaller.l41CZN/356/file0/file0" dev="loop4" ino=4 res=1
08:50:37 executing program 4:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

[  374.897079][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  374.902995][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:50:37 executing program 1:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:37 executing program 2:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:37 executing program 3:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

[  375.011155][   T26] audit: type=1800 audit(1550047837.771:111): pid=27556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16693 res=0
[  375.103867][   T26] audit: type=1804 audit(1550047837.821:112): pid=27556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir132959106/syzkaller.Pi2oIX/398/file0" dev="sda1" ino=16693 res=1
[  375.146024][   T26] audit: type=1800 audit(1550047837.841:113): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=5 res=0
[  375.174185][   T26] audit: type=1800 audit(1550047837.851:114): pid=27558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17217 res=0
[  375.196195][   T26] audit: type=1800 audit(1550047837.861:115): pid=27561 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17249 res=0
[  375.219348][   T26] audit: type=1804 audit(1550047837.871:116): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir948274113/syzkaller.l41CZN/357/file0/file0" dev="loop4" ino=5 res=1
08:50:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x11, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}]]}}}]}, 0x38}}, 0x0)

08:50:38 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={0x0, r0}, 0x10)
connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1})

08:50:38 executing program 4:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

[  375.377092][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  375.382921][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:38 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
write$P9_RSTATu(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="f30000007d00000000000080"], 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000))

08:50:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000001000)='net/route\x00')
read$FUSE(r0, &(0x7f0000000000), 0xd64)

08:50:38 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0xfffffffe})

08:50:38 executing program 5:
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc0347c03, 0x0)

[  375.777558][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  375.783856][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:50:38 executing program 1:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:38 executing program 2:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:38 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x1000000013, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

08:50:38 executing program 3:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:38 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)

08:50:39 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)

08:50:39 executing program 4:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:39 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)

08:50:39 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0xfffffffffffe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, r1)
socket(0x840000000002, 0x3, 0xff)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}]})

08:50:39 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)

08:50:39 executing program 0:
r0 = socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}, 0x0)

08:50:39 executing program 2:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:39 executing program 1:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:39 executing program 3:
symlink(0x0, &(0x7f0000000140)='.//ile0\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02b90100f2e66975cf03b0353cdaac30c479"], 0x1, 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2})
socket$l2tp(0x18, 0x1, 0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
write(r2, &(0x7f0000000400)="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", 0x200)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}}, 0x4000004)
sendfile(r2, r3, 0x0, 0x10000)

08:50:40 executing program 0:
r0 = creat(&(0x7f0000000a80)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x10, 0x0, 0x1000f4)
add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB])
r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x0)
r3 = open(&(0x7f00000008c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)

08:50:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000005c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i\x1c\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\fA\xc6t\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x06\x00\x00\x00\x00\x00\x00\x00\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x95\x01\xbe\xe8\x14\x9a\xbf\xa9\xbe\xe5h\x81!\xe4\xc4\x81\xca\x05.\xc8\xed\xdf\x8f\xa5\xbf\xb7\a\xab\xc0\xcd\xc2M\x12v\xfe\xc6\x96)\xc3|/r\xe4V0m\x8b\fV=\x19}\xf7dI\x9e\xcf\x9b\xa1\x9b\xf5\b')
write$cgroup_subtree(r0, 0x0, 0x0)

[  377.592766][T27929] overlayfs: missing 'lowerdir'
08:50:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet6(0xa, 0x1000000000005, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x7d, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18)

[  377.927820][T28071] overlayfs: missing 'lowerdir'
08:50:40 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x7d, 0x0, [0x0, 0x0, 0x198]})

08:50:40 executing program 5:
r0 = socket$packet(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x0, 0xff00}]}, &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0x436, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x48)

08:50:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:41 executing program 3:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2})

08:50:41 executing program 1:
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
io_setup(0xb, &(0x7f0000000240)=<r2=>0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x407000}])
lseek(r0, 0x0, 0x3)

08:50:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, 0x0)

08:50:41 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0xfe91)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5335, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f0000000300))
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1000000000013)

08:50:41 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001300)={'sit0\x00\x00\x00\x00\x00L\x00'})
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40800)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/4096)
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000080))
pipe(&(0x7f0000000000))
ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'syzkaller0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xfe\x02\x00\x03\xf8\x05\x00\x00\x00\x03', 0x141})

08:50:41 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000002980)="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", 0xfb}], 0x1}, 0x0)

08:50:41 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)
ioctl$TCFLSH(r0, 0x5437, 0x0)

08:50:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:41 executing program 5:
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2300000007ffff1600650730e3642437dcb1491633d61e00"], 0x18)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}})

08:50:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

[  378.764192][T28386] 9pnet: p9_errstr2errno: server reported unknown error e0ãd$7ܱI3Ö
08:50:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)

08:50:41 executing program 5:
r0 = open(0x0, 0x4, 0x0)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000578000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)='\x02\x00\x00\x00 \x00\x00\x00\x00\xfe\xff\x00\x01\x00\x00\x80\x8c\x00\x00\x00', 0x14, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001280)={0x5, 0x10, 0xffffffff80000000, 0x401, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"})
fcntl$getflags(r1, 0x200000000)
r3 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r3, 0x80404519, 0xfffffffffffffffd)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000240)=""/4096)
sysinfo(&(0x7f00000007c0)=""/154)
ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})

08:50:41 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x40043311, 0x0)

[  379.028708][T28276] device sit0 entered promiscuous mode
[  379.057082][    C1] net_ratelimit: 10 callbacks suppressed
[  379.057090][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  379.068842][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  379.079959][T28286] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.3'.
[  379.121727][T28286] kasan: CONFIG_KASAN_INLINE enabled
[  379.127029][T28286] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  379.135096][T28286] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  379.142032][T28286] CPU: 0 PID: 28286 Comm: syz-executor.3 Not tainted 5.0.0-rc6-next-20190213 #34
[  379.151127][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  379.161188][T28286] RIP: 0010:__lock_acquire+0x956/0x4790
[  379.166728][T28286] Code: 28 00 00 00 0f 85 7d 26 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 36 27 00 00 49 81 3b 20 25 9b 89 0f 84 8d f7 ff
[  379.186324][T28286] RSP: 0018:ffff88804bdf7180 EFLAGS: 00010006
[  379.192382][T28286] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  379.200344][T28286] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000060
[  379.208305][T28286] RBP: ffff88804bdf7350 R08: 0000000000000001 R09: 0000000000000001
[  379.216265][T28286] R10: ffff88804bdf7570 R11: 0000000000000060 R12: ffff8880595aa580
[  379.224223][T28286] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  379.232186][T28286] FS:  00007fd18b660700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  379.241105][T28286] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.247682][T28286] CR2: 0000001b33b24000 CR3: 00000000785b3000 CR4: 00000000001406f0
[  379.255654][T28286] DR0: 0000000000000000 DR1: 0000000000106000 DR2: 0000000000000000
[  379.263618][T28286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  379.271580][T28286] Call Trace:
[  379.274873][T28286]  ? finish_task_switch+0x146/0x780
[  379.280088][T28286]  ? finish_task_switch+0x118/0x780
[  379.285284][T28286]  ? __switch_to_asm+0x34/0x70
[  379.290046][T28286]  ? __switch_to_asm+0x40/0x70
[  379.294894][T28286]  ? __schedule+0x81f/0x1cc0
[  379.299503][T28286]  ? mark_held_locks+0xf0/0xf0
[  379.304269][T28286]  ? __sched_text_start+0x8/0x8
[  379.309115][T28286]  ? vprintk_emit+0x280/0x6d0
[  379.313792][T28286]  ? console_unlock+0x79f/0xeb0
[  379.318638][T28286]  ? lockdep_hardirqs_on+0x418/0x5d0
[  379.323930][T28286]  ? __lock_acquire+0x54b/0x4790
[  379.328853][T28286]  ? __lock_is_held+0xb6/0x140
[  379.333597][T28286]  ? debug_smp_processor_id+0x1c/0x20
[  379.338945][T28286]  ? tc_ctl_chain+0x42f/0x11a0
[  379.343687][T28286]  lock_acquire+0x16f/0x3f0
[  379.348166][T28286]  ? tc_ctl_chain+0x42f/0x11a0
[  379.352920][T28286]  ? tc_ctl_chain+0x42f/0x11a0
[  379.357664][T28286]  __mutex_lock+0xf7/0x1310
[  379.362145][T28286]  ? tc_ctl_chain+0x42f/0x11a0
[  379.366885][T28286]  ? tcf_block_refcnt_get+0x22d/0x3e0
[  379.372242][T28286]  ? tc_ctl_chain+0x42f/0x11a0
[  379.377001][T28286]  ? tcf_block_refcnt_get+0x22d/0x3e0
[  379.382349][T28286]  ? mutex_trylock+0x1e0/0x1e0
[  379.387088][T28286]  ? lock_downgrade+0x880/0x880
[  379.391927][T28286]  ? kasan_check_read+0x11/0x20
[  379.396753][T28286]  ? tcf_block_refcnt_get+0x254/0x3e0
[  379.402103][T28286]  mutex_lock_nested+0x16/0x20
[  379.406854][T28286]  ? mutex_lock_nested+0x16/0x20
[  379.411765][T28286]  tc_ctl_chain+0x42f/0x11a0
[  379.416331][T28286]  ? rtnetlink_rcv_msg+0x40a/0xb00
[  379.421426][T28286]  ? tcf_block_release+0xa0/0xa0
[  379.426342][T28286]  ? mutex_trylock+0x1e0/0x1e0
[  379.431086][T28286]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  379.437301][T28286]  ? tcf_block_release+0xa0/0xa0
[  379.442212][T28286]  rtnetlink_rcv_msg+0x465/0xb00
[  379.447129][T28286]  ? rtnetlink_put_metrics+0x560/0x560
[  379.452566][T28286]  ? netdev_pick_tx+0x300/0x300
[  379.457397][T28286]  ? netlink_deliver_tap+0x22d/0xbf0
[  379.462657][T28286]  ? find_held_lock+0x35/0x130
[  379.467399][T28286]  netlink_rcv_skb+0x17a/0x460
[  379.472138][T28286]  ? rtnetlink_put_metrics+0x560/0x560
[  379.477574][T28286]  ? netlink_ack+0xb50/0xb50
[  379.482139][T28286]  ? kasan_check_read+0x11/0x20
[  379.486965][T28286]  ? netlink_deliver_tap+0x254/0xbf0
[  379.492241][T28286]  rtnetlink_rcv+0x1d/0x30
[  379.496633][T28286]  netlink_unicast+0x536/0x720
[  379.501385][T28286]  ? netlink_attachskb+0x770/0x770
[  379.506475][T28286]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  379.512168][T28286]  ? __check_object_size+0x3d/0x42f
[  379.517344][T28286]  netlink_sendmsg+0x8ae/0xd70
[  379.522084][T28286]  ? netlink_unicast+0x720/0x720
[  379.527003][T28286]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[  379.532527][T28286]  ? apparmor_socket_sendmsg+0x2a/0x30
[  379.537961][T28286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  379.544176][T28286]  ? security_socket_sendmsg+0x93/0xc0
[  379.549612][T28286]  ? netlink_unicast+0x720/0x720
[  379.554524][T28286]  sock_sendmsg+0xdd/0x130
[  379.558922][T28286]  ___sys_sendmsg+0x806/0x930
[  379.563577][T28286]  ? copy_msghdr_from_user+0x430/0x430
[  379.569014][T28286]  ? kasan_check_read+0x11/0x20
[  379.573840][T28286]  ? __fget+0x381/0x550
[  379.577976][T28286]  ? ksys_dup3+0x3e0/0x3e0
[  379.582382][T28286]  ? lock_downgrade+0x880/0x880
[  379.587212][T28286]  ? __fget_light+0x1a9/0x230
[  379.591863][T28286]  ? __fdget+0x1b/0x20
[  379.595918][T28286]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  379.602148][T28286]  __sys_sendmsg+0x105/0x1d0
[  379.606712][T28286]  ? __ia32_sys_shutdown+0x80/0x80
[  379.611802][T28286]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  379.617237][T28286]  ? do_syscall_64+0x26/0x610
[  379.621912][T28286]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  379.627954][T28286]  ? do_syscall_64+0x26/0x610
[  379.632607][T28286]  __x64_sys_sendmsg+0x78/0xb0
[  379.637347][T28286]  do_syscall_64+0x103/0x610
[  379.641917][T28286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  379.647782][T28286] RIP: 0033:0x457e39
[  379.651658][T28286] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  379.671236][T28286] RSP: 002b:00007fd18b65fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  379.679622][T28286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39
[  379.687572][T28286] RDX: 0000000000000000 RSI: 0000000020002b00 RDI: 0000000000000003
[  379.695518][T28286] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  379.703469][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd18b6606d4
[  379.711419][T28286] R13: 00000000004c5417 R14: 00000000004d9228 R15: 00000000ffffffff
[  379.719379][T28286] Modules linked in:
[  379.723256][T28286] ---[ end trace 162d6b84bdd826f3 ]---
[  379.728695][T28286] RIP: 0010:__lock_acquire+0x956/0x4790
[  379.734213][T28286] Code: 28 00 00 00 0f 85 7d 26 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 36 27 00 00 49 81 3b 20 25 9b 89 0f 84 8d f7 ff
[  379.753793][T28286] RSP: 0018:ffff88804bdf7180 EFLAGS: 00010006
[  379.759836][T28286] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  379.767792][T28286] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000060
[  379.775737][T28286] RBP: ffff88804bdf7350 R08: 0000000000000001 R09: 0000000000000001
[  379.783685][T28286] R10: ffff88804bdf7570 R11: 0000000000000060 R12: ffff8880595aa580
[  379.791630][T28286] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  379.799579][T28286] FS:  00007fd18b660700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  379.808481][T28286] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.815037][T28286] CR2: 0000001b33b24000 CR3: 00000000785b3000 CR4: 00000000001406f0
[  379.822987][T28286] DR0: 0000000000000000 DR1: 0000000000106000 DR2: 0000000000000000
[  379.830940][T28286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  379.838887][T28286] Kernel panic - not syncing: Fatal exception
[  379.846024][T28286] Kernel Offset: disabled
[  379.850340][T28286] Rebooting in 86400 seconds..