][   T27] audit: type=1804 audit(1580259862.867:150): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir346306190/syzkaller.8BS7V3/922/bus" dev="sda1" ino=16857 res=1
01:04:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setpriority(0x1, 0x0, 0x0)

01:04:23 executing program 5:
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x6)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)

01:04:23 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8919, &(0x7f00000000c0)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'})

[ 1319.918730][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1319.924793][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1319.998698][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1320.004499][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1320.042788][   T27] audit: type=1804 audit(1580259863.247:151): pid=1226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir346306190/syzkaller.8BS7V3/922/bus" dev="sda1" ino=16857 res=1
[ 1320.638695][    C0] protocol 88fb is buggy, dev hsr_slave_0
01:04:25 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr="f08d42317bf02674bf4d948c25683e9c", 0x16})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0)

01:04:25 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000640)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "acfc08", 0x3, 0x11, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "1063b8", 0x0, 0x0, 0x0, @mcast1, @mcast1}}}}}}}, 0x0)

01:04:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0x1f, 0x100, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:25 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380), &(0x7f0000000240)=0x4)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x0, 0x8, 0x6, 0x1, 0x3ff]})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fstat(0xffffffffffffffff, 0x0)

01:04:25 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

01:04:25 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1322.413172][   T27] audit: type=1800 audit(1580259865.617:152): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17078 res=0
01:04:25 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227c, 0x0)

01:04:25 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

01:04:25 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
alarm(0x2)

01:04:25 executing program 5:
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, 0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)
getpid()
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2284, &(0x7f0000000100)={0x0, 0x20000, 0x0, 0x0, @buffer={0xce, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000})
ioctl$SG_IO(r0, 0x2284, &(0x7f0000000100)={0x0, 0x20000, 0x0, 0x0, @buffer={0xce, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000})
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r1, 0x2284, &(0x7f0000000100)={0x0, 0x20000, 0x0, 0x0, @buffer={0xce, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000})
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0), 0x1, 0x0, 0x0, 0x40}, 0x4000001)
getresgid(0x0, 0x0, &(0x7f0000000100))
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
pread64(0xffffffffffffffff, 0x0, 0x10, 0xd01208)
ptrace(0x10, 0x0)
syz_open_procfs(0x0, 0x0)
add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe)
r2 = syz_open_procfs(0x0, 0x0)
lremovexattr(&(0x7f0000000200)='./file0\x00', 0x0)
preadv(r2, &(0x7f00000017c0), 0x3da, 0x0)
add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

[ 1322.636173][   T27] audit: type=1800 audit(1580259865.837:153): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16827 res=0
01:04:25 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

01:04:25 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b)
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6c56fce3a1}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[ 1324.798719][    C0] net_ratelimit: 20 callbacks suppressed
[ 1324.798727][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.810141][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:04:28 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0xf, 0x0, 0x0, &(0x7f0000000380)="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"})

01:04:28 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

01:04:28 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr="f08d42317bf02674bf4d948c25683e9c", 0x16})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0)

01:04:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0x1f, 0x100, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:28 executing program 3:
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x52, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'syz_tun\x00'})
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xfffffff, 0xc00, 0x0, [0xff0f, 0x3800000]})

01:04:28 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1325.472232][   T27] audit: type=1800 audit(1580259868.677:154): pid=1298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17080 res=0
01:04:28 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

[ 1325.514189][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1325.528649][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1325.534472][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1325.540266][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1325.546132][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:04:28 executing program 3:
syz_open_procfs(0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000300))
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r2 = socket$caif_stream(0x25, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000380), &(0x7f0000000240)=0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x2, 0x8, 0x0, 0x1, 0x3ff, 0x100, 0x40]})
recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r3, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8034}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:04:28 executing program 5:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
io_setup(0x40000000008, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x37e00}])

[ 1325.619842][   T27] audit: type=1800 audit(1580259868.827:155): pid=1315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16900 res=0
01:04:28 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

[ 1325.752179][   T27] audit: type=1804 audit(1580259868.957:156): pid=1321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1230/bus" dev="sda1" ino=16900 res=1
[ 1325.795984][   T27] audit: type=1804 audit(1580259868.987:157): pid=1321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1230/bus" dev="sda1" ino=16900 res=1
[ 1325.824389][   T27] audit: type=1804 audit(1580259868.997:158): pid=1321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1230/bus" dev="sda1" ino=16900 res=1
[ 1325.858792][   T27] audit: type=1804 audit(1580259868.997:159): pid=1325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1230/bus" dev="sda1" ino=16900 res=1
01:04:29 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x280900)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

[ 1325.896662][   T27] audit: type=1800 audit(1580259868.997:160): pid=1326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16963 res=0
01:04:29 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS0(r0, 0x80184540, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

01:04:29 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

[ 1325.981220][   T27] audit: type=1800 audit(1580259869.187:161): pid=1330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16963 res=0
01:04:29 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

[ 1326.158652][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1326.164442][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1326.238667][    C1] protocol 88fb is buggy, dev hsr_slave_0
01:04:31 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr="f08d42317bf02674bf4d948c25683e9c", 0x16})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:04:31 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

01:04:31 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
utimes(&(0x7f0000000040)='./file0\x00', 0x0)

01:04:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0x1f, 0x100, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:31 executing program 3:
syz_open_procfs(0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000300))
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r2 = socket$caif_stream(0x25, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000380), &(0x7f0000000240)=0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x2, 0x8, 0x0, 0x1, 0x3ff, 0x100, 0x40]})
recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r3, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8034}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:04:31 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:31 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
request_key(&(0x7f000000aff5)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x94b, &(0x7f0000001000/0x3000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@dev}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2}, 0x1c)
socket(0x2000000011, 0x4000000000080002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1328.656480][   T27] kauditd_printk_skb: 2 callbacks suppressed
[ 1328.656503][   T27] audit: type=1800 audit(1580259871.857:164): pid=1361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16736 res=0
01:04:31 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x280900)
creat(0x0, 0x0)

[ 1328.824018][   T27] audit: type=1800 audit(1580259872.027:165): pid=1374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16892 res=0
01:04:32 executing program 5:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000a41000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x6, 0x0)

01:04:32 executing program 5:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'syz_tun\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX], @ANYBLOB, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYPTR64, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC=r0, @ANYBLOB="6637b7a434f1681f7aeeb39229f9ff4cf67dd3516a79921be113917560359948f5491567f7a296750fd1fe305557be7ed693ad7ac053f5c74d3d15e154100948cba62279781b78d65af0c9d9f4"], @ANYRES64, @ANYBLOB="93a822c992e818c4b7315cc09697ac51ce6b4d3cda8da82a49f127d0ece076ac5b96d2d6e7214e3f9ad860e2acf863c4a0e7e3bb83e85f73e3fb3258ac7261e844c7ccbed5418d4784191cece07888b51c2a3a1daa7780220e76f73e32298c937776c5b036627ba87b60738d74552f906774c0c483c9e11eda3032e997285f2ebf9e61411416b520fa588ae4894175fa11d0684903d2c924ed93b8f7b46e7dec81", @ANYRESOCT=0x0], @ANYRES32, @ANYRESHEX, @ANYRES16=0x0], 0x24)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xfffffff, 0xc00, 0x0, [0xff0f, 0x3800000]})

01:04:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x0)

01:04:32 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
request_key(&(0x7f000000aff5)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x94b, &(0x7f0000001000/0x3000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000240)={@dev}, 0x14)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@remote}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r3=>0x0})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@dev, r3}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@dev}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2}, 0x1c)
socket(0x2000000011, 0x4000000000080002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))

[ 1330.328650][    C0] net_ratelimit: 18 callbacks suppressed
[ 1330.328659][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.340845][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1330.398722][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.404571][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1331.038736][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1331.044535][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:04:34 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr="f08d42317bf02674bf4d948c25683e9c", 0x16})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:04:34 executing program 3:
syz_open_procfs(0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0x100, 0x40]})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r0, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)

01:04:34 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:34 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
request_key(&(0x7f000000aff5)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x94b, &(0x7f0000001000/0x3000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000240)={@dev}, 0x14)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@remote}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r3=>0x0})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@dev, r3}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@dev}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2}, 0x1c)
socket(0x2000000011, 0x4000000000080002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))

01:04:34 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x280900)
creat(0x0, 0x0)

01:04:34 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1331.682120][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1331.732190][   T27] audit: type=1800 audit(1580259874.937:166): pid=1420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17086 res=0
[ 1331.768624][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1331.774595][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1331.780517][    C1] protocol 88fb is buggy, dev hsr_slave_0
01:04:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x28, 0x0, 0x0, 0xfffff008}, {0x6}]}]}, {0x4}}}]}]}, 0x60}}, 0x0)

01:04:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='status\x00')
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
dup2(r0, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000))
fcntl$getown(0xffffffffffffffff, 0x9)
syz_open_procfs(0x0, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
unshare(0x40000000)

[ 1332.138290][ T1436] IPVS: ftp: loaded support on port[0] = 21
[ 1332.345562][ T1438] IPVS: ftp: loaded support on port[0] = 21
01:04:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='status\x00')
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
dup2(r0, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000))
fcntl$getown(0xffffffffffffffff, 0x9)
syz_open_procfs(0x0, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
unshare(0x40000000)

01:04:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:35 executing program 0:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x280900)
creat(0x0, 0x0)

[ 1332.562719][ T1442] IPVS: ftp: loaded support on port[0] = 21
[ 1332.569029][  T318] tipc: TX() has been purged, node left!
01:04:35 executing program 3:
syz_open_procfs(0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0x100, 0x40]})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r0, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)

[ 1332.720147][   T27] audit: type=1800 audit(1580259875.927:167): pid=1453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16809 res=0
[ 1334.168711][  T318] tipc: TX() has been purged, node left!
[ 1334.338662][  T318] tipc: TX() has been purged, node left!
01:04:37 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr="f08d42317bf02674bf4d948c25683e9c", 0x16})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:04:37 executing program 5:
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x8020001)
getresuid(&(0x7f0000004180), 0x0, 0x0)

01:04:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:37 executing program 0:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)
r0 = getpid()
r1 = gettid()
tkill(r1, 0x8001004000000016)
ptrace(0x4206, r0)
ptrace$getsig(0x4202, r1, 0x0, 0x0)

01:04:37 executing program 3:
syz_open_procfs(0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x5, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0x100, 0x40]})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
fstat(r0, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)

01:04:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)

01:04:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

01:04:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0)

01:04:38 executing program 5:

01:04:38 executing program 0:

01:04:38 executing program 5:

[ 1335.918640][    C1] net_ratelimit: 19 callbacks suppressed
[ 1335.918650][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1335.930138][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1335.936057][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1335.941965][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1336.558692][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.564553][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1336.638667][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.644755][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1337.278689][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1337.284640][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:04:41 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:41 executing program 5:

01:04:41 executing program 0:

01:04:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:41 executing program 3:

01:04:41 executing program 4:

01:04:41 executing program 5:

01:04:41 executing program 3:

01:04:41 executing program 0:

01:04:41 executing program 4:

01:04:41 executing program 5:

01:04:41 executing program 3:

01:04:44 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:44 executing program 0:

01:04:44 executing program 4:

01:04:44 executing program 5:

01:04:44 executing program 3:

01:04:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:44 executing program 3:

01:04:44 executing program 5:

01:04:44 executing program 4:

[ 1341.027094][    C0] net_ratelimit: 19 callbacks suppressed
[ 1341.027108][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:04:44 executing program 0:

01:04:44 executing program 5:

01:04:44 executing program 3:

[ 1341.438657][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1341.444476][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1342.158677][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1342.164569][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1342.170584][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1342.176340][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1342.798682][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1342.804603][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1342.878721][    C1] protocol 88fb is buggy, dev hsr_slave_0
01:04:47 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:47 executing program 4:

01:04:47 executing program 0:

01:04:47 executing program 5:

01:04:47 executing program 3:

01:04:47 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:47 executing program 5:

01:04:47 executing program 4:

01:04:47 executing program 3:

01:04:47 executing program 0:

01:04:47 executing program 3:

01:04:47 executing program 5:

[ 1346.318708][    C1] net_ratelimit: 14 callbacks suppressed
[ 1346.318716][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1346.330509][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1346.336404][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1346.342315][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1346.958678][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1346.964523][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1347.038696][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1347.044503][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:04:50 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:50 executing program 4:

01:04:50 executing program 0:

01:04:50 executing program 3:

01:04:50 executing program 5:

01:04:50 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:50 executing program 3:

[ 1347.250149][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:04:50 executing program 5:

01:04:50 executing program 4:

01:04:50 executing program 0:

01:04:50 executing program 3:

01:04:50 executing program 3:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100))
ptrace(0x10, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x12c, 0x33)

[ 1347.678636][    C0] protocol 88fb is buggy, dev hsr_slave_0
01:04:53 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x381840)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
dup3(r3, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB='\x00\x00', @ANYBLOB="080040000000000008000a0100003c1f0400d10008000a0102000000971856d862ef8efa488450b8fa15b2fb127cc1160295a5c6442340e0c59dc52ef4"], 0x3}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

01:04:53 executing program 5:
inotify_init()
syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x11)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000d803000000000000f8010000fc3e15617bf6e05ef801000008030000080300000803000008030000080300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000d801f801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380073746174697374696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00010010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x7}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x7)

01:04:53 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:04:53 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x343000, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000006eda98866e0409e920c35000de210b174aa51623eb680e5cae8d42d0d4a25d05851bf2cf349d8c3bf8102c78b19c79bdc4c755ff7444a939abc3eb714388f24187c14cfad3be27c50145e123c07e036d6272d3731b86328d73c4743c7b77539a0da8c0043e45d36ff1c2739ec17eb18b1b27fa04df"], 0x7c)
close(r2)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = timerfd_create(0x0, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2})
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380))
getresgid(&(0x7f0000000240), &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000300))
setresgid(0x0, 0xee01, r4)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00'})

01:04:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1350.296462][ T1653] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1350.325223][ T1657] IPVS: ftp: loaded support on port[0] = 21
[ 1350.490642][ T1673] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
01:04:53 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x343000, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000006eda98866e0409e920c35000de210b174aa51623eb680e5cae8d42d0d4a25d05851bf2cf349d8c3bf8102c78b19c79bdc4c755ff7444a939abc3eb714388f24187c14cfad3be27c50145e123c07e036d6272d3731b86328d73c4743c7b77539a0da8c0043e45d36ff1c2739ec17eb18b1b27fa04df"], 0x7c)
close(r2)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = timerfd_create(0x0, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2})
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380))
getresgid(&(0x7f0000000240), &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000300))
setresgid(0x0, 0xee01, r4)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00'})

[ 1350.624775][ T1648] cgroup: fork rejected by pids controller in /syz3
[ 1350.635971][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1350.694183][ T1653] IPVS: ftp: loaded support on port[0] = 21
[ 1350.721717][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1350.789737][T14277] tipc: TX() has been purged, node left!
01:04:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x381840)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
dup3(r3, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB='\x00\x00', @ANYBLOB="080040000000000008000a0100003c1f0400d10008000a0102000000971856d862ef8efa488450b8fa15b2fb127cc1160295a5c6442340e0c59dc52ef4"], 0x3}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

01:04:54 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:04:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1351.104758][ T1696] BPF:Invalid string section
01:04:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1351.190040][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:04:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1351.435092][    C1] net_ratelimit: 20 callbacks suppressed
[ 1351.435105][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1351.467290][ T1827] BPF:Invalid string section
[ 1351.838857][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1351.845398][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1352.558638][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1352.564481][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1352.570326][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1352.576125][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1353.198823][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1353.204931][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1353.278677][    C1] protocol 88fb is buggy, dev hsr_slave_0
01:04:56 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:56 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1353.554317][ T1842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:04:56 executing program 5:
inotify_init()
syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x11)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000d803000000000000f8010000fc3e15617bf6e05ef801000008030000080300000803000008030000080300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000d801f801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380073746174697374696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00010010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x7}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x7)

01:04:56 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:04:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:04:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:56 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:04:57 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

[ 1353.803416][ T1849] BPF:Invalid string section
[ 1353.886175][ T1860] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1353.888026][ T1866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:04:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1353.932645][ T1865] IPVS: ftp: loaded support on port[0] = 21
01:04:57 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:04:57 executing program 5:
inotify_init()
syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x11)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000d803000000000000f8010000fc3e15617bf6e05ef801000008030000080300000803000008030000080300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000d801f801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000020073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380073746174697374696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00010010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x7}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x7)

[ 1354.101730][ T1873] BPF:Invalid string section
01:04:57 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)

[ 1354.299048][ T1883] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1354.325903][ T1886] IPVS: ftp: loaded support on port[0] = 21
[ 1354.568645][T29778] tipc: TX() has been purged, node left!
[ 1355.938691][T29778] tipc: TX() has been purged, node left!
01:04:59 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:04:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:04:59 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:04:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

01:04:59 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:04:59 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)

[ 1356.499906][ T1903] BPF:Invalid string section
[ 1356.542178][    C0] net_ratelimit: 14 callbacks suppressed
[ 1356.542193][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:04:59 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:04:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:04:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

[ 1356.718639][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1356.724447][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1356.730275][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1356.736024][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1356.781832][ T1923] BPF:Invalid string section
01:05:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:00 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

[ 1357.018314][ T1933] BPF:Invalid string section
01:05:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x8}, 0x20)

[ 1357.243409][ T1937] BPF:	(anon) type_id=167772160 bits_offset=1
[ 1357.268534][ T1938] BPF:	(anon) type_id=167772160 bits_offset=1
[ 1357.302116][ T1937] BPF: 
[ 1357.309171][ T1937] BPF:Invalid type_id
[ 1357.313183][ T1937] BPF:
[ 1357.313183][ T1937] 
[ 1357.326077][ T1938] BPF: 
[ 1357.329131][ T1938] BPF:Invalid type_id
[ 1357.333168][ T1938] BPF:
[ 1357.333168][ T1938] 
[ 1357.358639][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1357.364967][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1357.438650][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1357.444472][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1358.078681][    C0] protocol 88fb is buggy, dev hsr_slave_0
01:05:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:02 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:02 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x108}, 0xffffff02)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)

01:05:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:02 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)

01:05:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1359.700994][ T1957] BPF:Invalid string section
01:05:02 executing program 4:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:03 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1359.915047][ T1975] BPF:Invalid string section
01:05:03 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:03 executing program 4:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1360.104153][ T1984] BPF:Invalid string section
01:05:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:03 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1360.297461][ T1993] BPF:Invalid string section
[ 1360.423314][   T27] audit: type=1804 audit(1580259903.627:168): pid=1963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1263/bus" dev="sda1" ino=17396 res=1
[ 1360.574910][   T27] audit: type=1804 audit(1580259903.777:169): pid=1956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1263/bus" dev="sda1" ino=17396 res=1
01:05:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:03 executing program 4:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:03 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:03 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:03 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, 0x0, 0x800000c1)

01:05:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1360.686759][   T27] audit: type=1804 audit(1580259903.887:170): pid=1999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir532502860/syzkaller.fvakxG/1263/bus" dev="sda1" ino=17396 res=1
01:05:04 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1360.800331][ T2004] BPF:Invalid string section
01:05:04 executing program 4:
r0 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1360.914973][ T2021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff})
write$binfmt_elf64(r2, 0x0, 0x0)
ioctl(r2, 0x1, &(0x7f00000007c0)="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")
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/101, &(0x7f0000000080)=0x65)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, 0x0, 0x0)
bind(r3, &(0x7f0000000100)=@phonet={0x23, 0xf0, 0x8, 0xc1}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x0, 0x0, [{}]}]}}, &(0x7f0000000300)=""/241, 0x32, 0xf1, 0x8}, 0x20)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000400)={0x2a, "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"})
ioctl$KIOCSOUND(r4, 0x4b2f, 0xff)

01:05:04 executing program 4:
r0 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:04 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1361.060454][ T2030] BPF:Invalid string section
01:05:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:04 executing program 4:
r0 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

[ 1361.209887][ T2042] BPF:Invalid string section
[ 1361.216722][ T2043] BPF:Section overlap found
[ 1361.248544][ T2047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:04 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:04 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1361.404494][ T2052] BPF:Invalid string section
01:05:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1361.571855][ T2058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1361.598717][    C1] net_ratelimit: 18 callbacks suppressed
[ 1361.598727][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1361.610280][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1361.971408][ T2067] BPF:Section overlap found
[ 1362.238670][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1362.244485][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1362.958657][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1362.964444][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1362.970216][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1362.976066][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1363.598680][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1363.604514][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:07 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:07 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:07 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff})
write$binfmt_elf64(r2, 0x0, 0x0)
ioctl(r2, 0x1, &(0x7f00000007c0)="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")
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/101, &(0x7f0000000080)=0x65)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, 0x0, 0x0)
bind(r3, &(0x7f0000000100)=@phonet={0x23, 0xf0, 0x8, 0xc1}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x0, 0x0, [{}]}]}}, &(0x7f0000000300)=""/241, 0x32, 0xf1, 0x8}, 0x20)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000400)={0x2a, "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"})
ioctl$KIOCSOUND(r4, 0x4b2f, 0xff)

[ 1364.021052][ T2077] BPF:Invalid string section
[ 1364.042766][ T2076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:07 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

[ 1364.099165][ T2089] BPF:Section overlap found
01:05:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:07 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1364.216917][ T2094] BPF:Invalid string section
01:05:07 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:07 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1364.280419][ T2097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:07 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

01:05:07 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1364.405117][ T2102] BPF:Invalid string section
01:05:07 executing program 4:
memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})

[ 1364.520468][ T2108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:10 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:10 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:10 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:10 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)

01:05:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1367.118638][    C1] net_ratelimit: 14 callbacks suppressed
[ 1367.118661][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.130121][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.136154][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.141962][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.156325][ T2125] BPF:Invalid string section
[ 1367.191240][ T2128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:10 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)

01:05:10 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:10 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1367.403592][ T2140] BPF:Invalid string section
01:05:10 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)

01:05:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1367.537407][ T2143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1367.604487][ T2148] BPF:Invalid string section
01:05:10 executing program 4:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[ 1367.758627][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.764556][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.838702][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.844699][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1368.478711][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1368.485289][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:13 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

01:05:13 executing program 4:
r0 = socket(0x400000000010, 0x2, 0x0)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x522, 0x4)
mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)

[ 1370.313110][ T2175] BPF:Invalid string section
[ 1370.324491][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79})

[ 1370.438189][ T2182] BPF:Invalid string section
01:05:13 executing program 5:
msgsnd(0x0, 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x7fb)
msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x1004)
msgrcv(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="000000a02ad8be30917185c51dc0f8a418a60000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e6150f81765000000000000000000000000000000000000000000000000000000000000000000000000009706000000000000000000000000000000000000000000000000000000000000000000000000008e3916ba7fecc3a5ede73637c9052a69bbfc44fbd0abc516d4ff4faf942a6c2170a75a6804cfee53023fea795dff2d80ac3b1229b844c124db3982c029e117c27aad343df479f5f86a38da15fadfa338d97390b50754c3d43e070cf6a151b8dbb4a6f74b86f760fa0e7fb3710f00ac60064dbf92ce30943e1c0a632719bf1a744ef25fee12298049f5b6eb74df46c79b9cf1734381c9cea14fde20c3d84f9c683775eaa01bfbe53af90db0a8f179ddbcd942f969f9b676f99f0bdc200d0d15b68eda860afe287a497c6ee03835275363190e4aae88eddddfd3ced7cf8b3153db212c94119a75a3447ae7ce4376c52aeca9"], 0x9b, 0xd6d0c418f59fe7d3, 0x1000)

01:05:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

[ 1370.570911][ T2190] BPF:Invalid string section
[ 1370.662300][ T2198] BPF:Invalid string section
[ 1370.763673][ T2202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1372.638721][    C0] net_ratelimit: 18 callbacks suppressed
[ 1372.638744][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1372.650717][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:16 executing program 4:

01:05:16 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:16 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:16 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

01:05:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1373.300664][ T2211] BPF:Invalid string section
[ 1373.358645][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1373.365099][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1373.371198][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1373.377373][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:16 executing program 4:
syz_open_dev$mice(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)

[ 1373.408284][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280060003000000000004001200b3045d83c694e58f5194cd0dbe0308ba0399d7c01441eaa3c9d16609b7a0881bfd403dd143add34d03a3af336662087ba08178b15b735376831172486d27bac6c2d09e65d3514d"], 0x40}}, 0x0)

01:05:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:16 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1373.637369][   T27] audit: type=1804 audit(1580259916.837:171): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/bus" dev="ramfs" ino=139507 res=1
[ 1373.681052][ T2235] BPF:Invalid string section
[ 1373.733525][   T27] audit: type=1804 audit(1580259916.897:172): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/bus" dev="ramfs" ino=139507 res=1
01:05:16 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x100)

[ 1373.774634][ T2239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1373.835275][   T27] audit: type=1804 audit(1580259916.897:173): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/bus" dev="ramfs" ino=139507 res=1
01:05:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:17 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1373.986056][   T27] audit: type=1804 audit(1580259917.187:174): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/file0/bus" dev="ramfs" ino=139526 res=1
[ 1373.998682][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.017588][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.070556][   T27] audit: type=1804 audit(1580259917.217:175): pid=2246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/file0/bus" dev="ramfs" ino=139526 res=1
[ 1374.093279][ T2252] BPF:Invalid string section
[ 1374.096033][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.106411][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.204342][ T2257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1374.211216][   T27] audit: type=1804 audit(1580259917.217:176): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1115/file0/file0/bus" dev="ramfs" ino=139526 res=1
01:05:19 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:19 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca00000800ffffffba000000ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

01:05:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x7, 0x0, 0x400}]}, {0x5}}, &(0x7f00000000c0)=""/235, 0x26, 0xeb, 0x8}, 0x20)

01:05:19 executing program 4:

01:05:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:19 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1376.491874][ T2268] BPF:Invalid string section
[ 1376.523794][ T2272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:19 executing program 4:

01:05:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

01:05:19 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:19 executing program 5:

01:05:20 executing program 4:

01:05:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

[ 1376.806337][ T2287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1378.158687][    C0] net_ratelimit: 16 callbacks suppressed
[ 1378.158694][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1378.170128][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1378.238674][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1378.244580][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1378.878683][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1378.884461][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:22 executing program 5:

01:05:22 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:22 executing program 4:

01:05:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

01:05:22 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1379.598640][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1379.604489][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1379.610449][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1379.616193][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 'q%A.'}, 0x0, 0x4, @fd})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)="b6232b7d005b899d55a7854e1e41bbb3aeb6cd48f1581d35348c46f3eed5d9803e42266dcef8ac0021714a3c06807c609a03", 0x32}], 0x1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:05:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)="b6232b7d005b899d55a7854e1e41bbb3aeb6cd48f1581d35348c46f3eed5d9803e42266dcef8ac0021714a3c06807c609a03", 0x32}], 0x1, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9dea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1379.727509][ T2311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:23 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/235, 0x0, 0xeb, 0x8}, 0x20)

[ 1379.956957][ T2326] BPF:hdr_len not found
[ 1379.991648][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/235, 0x0, 0xeb, 0x8}, 0x20)

01:05:23 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1380.208349][ T2334] BPF:hdr_len not found
01:05:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f000000", 0x12)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES32=0x0], 0x0)

[ 1380.275164][ T2339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:23 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/235, 0x0, 0xeb, 0x8}, 0x20)

[ 1380.492645][ T2349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1380.575244][ T2354] BPF:hdr_len not found
01:05:25 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:25 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x991}]})

01:05:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, &(0x7f00000000c0)=""/235, 0x1a, 0xeb, 0x8}, 0x20)

01:05:25 executing program 5:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/18, 0x33c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000140)={{0x0, 0x20}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

[ 1382.802017][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1382.855622][ T2373] BPF:Invalid string section
01:05:26 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, 0x0, 0x1a, 0x0, 0x8}, 0x20)

01:05:26 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @xdp, @isdn={0x22, 0x87}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x7f000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x100000001]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1383.094075][ T2386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, 0x0, 0x1a, 0x0, 0x8}, 0x20)

01:05:26 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, 0x0, 0x1a, 0x0, 0x8}, 0x20)

[ 1383.302435][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1383.768713][    C1] net_ratelimit: 16 callbacks suppressed
[ 1383.768722][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1383.780390][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1383.786306][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1383.792258][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1384.398683][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1384.404498][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1384.478664][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1384.484706][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1385.118644][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1385.124424][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:29 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:29 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x33, 0x2}, 0x7)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000200, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001})
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673695e030000000000006e657464657673696d300000"], 0x50}}, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x0, 0xfff}}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:05:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r0)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, &(0x7f00000000c0)=""/235, 0x1a, 0xeb}, 0x20)

01:05:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:29 executing program 5:
msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88))
msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="95"], 0x1, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})

01:05:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, &(0x7f00000000c0)=""/235, 0x1a, 0xeb}, 0x20)

01:05:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r0)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:29 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x100000001]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000780)=ANY=[], &(0x7f000095dffc))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x4f2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x7ff}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x9, @rand_addr="eebac33e016ef89dc8442fe80aa70d0f"}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}]}, &(0x7f0000000180)=0x10)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

01:05:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r0)
close(r1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000001700)=0x9)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, &(0x7f00000000c0)=""/235, 0x1a, 0xeb}, 0x20)

01:05:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000129000/0x5000)=nil, 0x5000, 0x1)

01:05:32 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:32 executing program 0:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
capset(&(0x7f0000000080), 0x0)

01:05:32 executing program 4:

01:05:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:32 executing program 5:

01:05:32 executing program 3:

01:05:32 executing program 5:

01:05:32 executing program 4:

01:05:32 executing program 0:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:32 executing program 3:

01:05:32 executing program 5:

[ 1389.278693][    C0] net_ratelimit: 18 callbacks suppressed
[ 1389.278704][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1389.290400][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1389.998670][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1390.004469][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1390.010451][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1390.016214][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1390.638672][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1390.644910][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1390.718707][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1390.724495][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:35 executing program 3:

01:05:35 executing program 4:

01:05:35 executing program 0:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:35 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:35 executing program 5:

01:05:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:35 executing program 3:

01:05:35 executing program 5:

01:05:35 executing program 4:

01:05:35 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:35 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:35 executing program 3:

01:05:35 executing program 4:

01:05:35 executing program 5:

01:05:35 executing program 3:

01:05:35 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:35 executing program 5:

01:05:36 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x8002, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="839c86360f92b35c64bcb93b9308627ac8dbfba070f6208f731c013ce573e9c03074a384bd1a3278e4565ed8a19310e6c284375f3c48f17c2df902e87e943926ef82798734b3b43e060c445c5ac4c0afa191f1e08cfffd8c016c3ffc25c690e73ffcf59a29e53820920d7393641a8790928c504f032af7944bf6445a7942f057fb0e8f322203a0f3f801b8b97f7ff9897962aebe9732357c8610eb469b959dbfb4ae7d5d20cdca1545018ab1699b858f44ab5fb9d5ebfd0c2f6d93eac093eb4a287a33ba335e5150a234a96ebca4288f6054e93d4106da2091c34694e10aaa17fc55e491d141d6ec14edde3fedf4cc48b75db02a44f886d1b615fd6487be9954427d782fc25f9b27fa6658bd5029c8477aa252cf7091a70fbe6471eec8993a42a3a78fa1125ba1cee3e35b62655a0adce07f1efe5327e3daed44ebfb1035d32567e7945d6524a3b637870b7ba578ae8face1a11abd9adb779db657d5c7194f80101a38cb13d1f1d2ffba655e13e7a5138ffabc0f291185e22741920634a419f9983cc5ed889f2d135614d4e0786093bc9832b0c25599d6dbab7066b439b5720c5f6312050ab05f5f86301a638eb0e1121d3bbf961ecf8c43e81387f99c70982e6f7101d2034697e2346e78edd441ed9cc81b66ff0cc43417cebb663031207e728eba7fb735f16471255d590a9fea05a4a90769101b0ea2b48af43effc4f4f10f9c31094572ef62dda96a2179982569693c398377582ad98f618610b7e9e874512a7920ed4f3d3da2d1709530f6cf4a7366acad315e9fd14f5fbdf2e7b56e5232d3ea1861316e029e5430623a6b8641b966c3a8830f78e528fa33ab89e06c3b312b3318b0ac70f7403457f2ebdd2994185c0cbaa8c2336164ee00f64ad2fca7d688327f792a5c8a6a3886193399448bdc7dcf9c01357a1b5a0c59fd5375b187823e12bae5750ad8dce8f0ccc079fa65139e50449f04083c61cbc62d3f291e98200f12d6e97c57ef1f505ba7ec1424002bbac0c004fcfbdae2d979c8f230c499e8aa574d8903adb72c198674e5b02baaf8d43d7916e96b6eea8111a3f59f3da9b952266589dde624e8b614a6a79a498336bbfbebde306ffc914a3c54e10c836f92e370f3b7d5a97a7bc30bf4cd5b1177d5a513b661f42a5ece661804763ba1e746c94b3e7e73358ce63c3efcdfdb82b6098f84155d5ab740b8b45195e9f905da8337dff36be2aaa0df8f53f0fcb3a8b4b5d47e028841547fb5a5a545ba85176c37bfebadcd03630145484a635ca5ddd88855a631d2a10d3777ae23812a686c69f3c3122d0226d83053e218d5a2cb23403364df2c77805082769340c593d9c97a752dd61c5771f6db3b1b31254027ce32271bcb2200fb01391760e361db912e1d996880ad49a4290e31f7ae5a4052c381321b5b19a323d989629c7f3bae9b2238095ce74284c649cbf51b9b7431a68150c6f512bd84596a290cfb3e0e42183378f3a7bccdef24c75231ffc32a2923f91f37ae4a70ff7b0ac148372a3b26eed984069024cbec53599b842cc023a4604045914d335b598d15ea16db7a3dc0d4cd92533b99c9874cbc94e923d5ca2e0f626e17bcbb574b95bc3a0265a00adae527fade2ff46c52c67ff651253ad63b8acf8bd2e46d1d0c6cd5b261033a3119caf70fac726e076241a4ac8ba8115eedb0aa26d0b66c953c7a0b012b878da1b60e07556c667c90d9e77791b6cd852ba2bd6ee1d682e87fde8ad35aca3c117cf73dcfa5ba5a9a454c5c856c719d7a17fb1f1c0a9b680482e3c3c0841b8bf401cff2da46bf44d5408eadfbb571536940b4a80035d65aa087478c03aa97bc48db9d503fa15fd9cbfb39db49897a68a32b2367185f32b468c1caeaffaa2babc7b55aeebde1c98ffcd473ad3237dacfab10ec5298d25843093bb557c1431c95cfb6c2e20af997b8b3bc393fb1fea12a8122d70a58034e4f2677f9f7494edf2678b7d6b17ff55288af722cf51038fe0d5a6d66ec5cfc9ff2e556607c254e5d6a2ab011dc7216551d22ec9042f8bcef9f001a0d9c81019e3188cb6219815d60dc3dfb57f28b2d5db0a9d777e7", 0xfe32}], 0x1}, 0x0)

01:05:36 executing program 4:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x8002, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="839c86360f92b35c64bcb93b9308627ac8dbfba070f6208f731c013ce573e9c03074a384bd1a3278e4565ed8a19310e6c284375f3c48f17c2df902e87e943926ef82798734b3b43e060c445c5ac4c0afa191f1e08cfffd8c016c3ffc25c690e73ffcf59a29e53820920d7393641a8790928c504f032af7944bf6445a7942f057fb0e8f322203a0f3f801b8b97f7ff9897962aebe9732357c8610eb469b959dbfb4ae7d5d20cdca1545018ab1699b858f44ab5fb9d5ebfd0c2f6d93eac093eb4a287a33ba335e5150a234a96ebca4288f6054e93d4106da2091c34694e10aaa17fc55e491d141d6ec14edde3fedf4cc48b75db02a44f886d1b615fd6487be9954427d782fc25f9b27fa6658bd5029c8477aa252cf7091a70fbe6471eec8993a42a3a78fa1125ba1cee3e35b62655a0adce07f1efe5327e3daed44ebfb1035d32567e7945d6524a3b637870b7ba578ae8face1a11abd9adb779db657d5c7194f80101a38cb13d1f1d2ffba655e13e7a5138ffabc0f291185e22741920634a419f9983cc5ed889f2d135614d4e0786093bc9832b0c25599d6dbab7066b439b5720c5f6312050ab05f5f86301a638eb0e1121d3bbf961ecf8c43e81387f99c70982e6f7101d2034697e2346e78edd441ed9cc81b66ff0cc43417cebb663031207e728eba7fb735f16471255d590a9fea05a4a90769101b0ea2b48af43effc4f4f10f9c31094572ef62dda96a2179982569693c398377582ad98f618610b7e9e874512a7920ed4f3d3da2d1709530f6cf4a7366acad315e9fd14f5fbdf2e7b56e5232d3ea1861316e029e5430623a6b8641b966c3a8830f78e528fa33ab89e06c3b312b3318b0ac70f7403457f2ebdd2994185c0cbaa8c2336164ee00f64ad2fca7d688327f792a5c8a6a3886193399448bdc7dcf9c01357a1b5a0c59fd5375b187823e12bae5750ad8dce8f0ccc079fa65139e50449f04083c61cbc62d3f291e98200f12d6e97c57ef1f505ba7ec1424002bbac0c004fcfbdae2d979c8f230c499e8aa574d8903adb72c198674e5b02baaf8d43d7916e96b6eea8111a3f59f3da9b952266589dde624e8b614a6a79a498336bbfbebde306ffc914a3c54e10c836f92e370f3b7d5a97a7bc30bf4cd5b1177d5a513b661f42a5ece661804763ba1e746c94b3e7e73358ce63c3efcdfdb82b6098f84155d5ab740b8b45195e9f905da8337dff36be2aaa0df8f53f0fcb3a8b4b5d47e028841547fb5a5a545ba85176c37bfebadcd03630145484a635ca5ddd88855a631d2a10d3777ae23812a686c69f3c3122d0226d83053e218d5a2cb23403364df2c77805082769340c593d9c97a752dd61c5771f6db3b1b31254027ce32271bcb2200fb01391760e361db912e1d996880ad49a4290e31f7ae5a4052c381321b5b19a323d989629c7f3bae9b2238095ce74284c649cbf51b9b7431a68150c6f512bd84596a290cfb3e0e42183378f3a7bccdef24c75231ffc32a2923f91f37ae4a70ff7b0ac148372a3b26eed984069024cbec53599b842cc023a4604045914d335b598d15ea16db7a3dc0d4cd92533b99c9874cbc94e923d5ca2e0f626e17bcbb574b95bc3a0265a00adae527fade2ff46c52c67ff651253ad63b8acf8bd2e46d1d0c6cd5b261033a3119caf70fac726e076241a4ac8ba8115eedb0aa26d0b66c953c7a0b012b878da1b60e07556c667c90d9e77791b6cd852ba2bd6ee1d682e87fde8ad35aca3c117cf73dcfa5ba5a9a454c5c856c719d7a17fb1f1c0a9b680482e3c3c0841b8bf401cff2da46bf44d5408eadfbb571536940b4a80035d65aa087478c03aa97bc48db9d503fa15fd9cbfb39db49897a68a32b2367185f32b468c1caeaffaa2babc7b55aeebde1c98ffcd473ad3237dacfab10ec5298d25843093bb557c1431c95cfb6c2e20af997b8b3bc393fb1fea12a8122d70a58034e4f2677f9f7494edf2678b7d6b17ff55288af722cf51038fe0d5a6d66ec5cfc9ff2e556607c254e5d6a2ab011dc7216551d22ec9042f8bcef9f001a0d9c81019e3188cb6219815d60dc3dfb57f28b2d5db0a9d777e7", 0xfe32}], 0x1}, 0x0)
getgid()

01:05:36 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x41c7af9683400be6, &(0x7f0000002d80)={@loopback, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x803, 0xa2)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
connect(r2, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200))
stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000440))
stat(0x0, &(0x7f0000000880))
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresgid(0x0, r4, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresgid(0x0, r5, 0x0)
stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000300))
stat(&(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000006c0))
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002002, &(0x7f0000000e40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c034efb269d1200003d3078303030303030303030303030346534662c64656661756c745f7096f8bd9fc100e702ad9f869a537578f865726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c64656661756c745f7065726d694fc6630a3382a3853daf3a9981e744ba7373696f6e732c616c6c6f775f6f746865722c6465666175"])
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000K000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x2, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
creat(0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)=ANY=[])
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)

01:05:36 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1393.006414][ T2754] fuse: Unknown parameter '0x000000000000000b'
[ 1394.798650][    C0] net_ratelimit: 16 callbacks suppressed
[ 1394.798659][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1394.810184][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1394.888722][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1394.894512][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:38 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:38 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:38 executing program 4:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000640)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "acfc08", 0x3, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "1063b8", 0x0, 0x0, 0x0, @mcast1, @mcast1}}}}}}}, 0x0)

01:05:38 executing program 5:

01:05:38 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x8002, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="839c86360f92b35c64bcb93b9308627ac8dbfba070f6208f731c013ce573e9c03074a384bd1a3278e4565ed8a19310e6c284375f3c48f17c2df902e87e943926ef82798734b3b43e060c445c5ac4c0afa191f1e08cfffd8c016c3ffc25c690e73ffcf59a29e53820920d7393641a8790928c504f032af7944bf6445a7942f057fb0e8f322203a0f3f801b8b97f7ff9897962aebe9732357c8610eb469b959dbfb4ae7d5d20cdca1545018ab1699b858f44ab5fb9d5ebfd0c2f6d93eac093eb4a287a33ba335e5150a234a96ebca4288f6054e93d4106da2091c34694e10aaa17fc55e491d141d6ec14edde3fedf4cc48b75db02a44f886d1b615fd6487be9954427d782fc25f9b27fa6658bd5029c8477aa252cf7091a70fbe6471eec8993a42a3a78fa1125ba1cee3e35b62655a0adce07f1efe5327e3daed44ebfb1035d32567e7945d6524a3b637870b7ba578ae8face1a11abd9adb779db657d5c7194f80101a38cb13d1f1d2ffba655e13e7a5138ffabc0f291185e22741920634a419f9983cc5ed889f2d135614d4e0786093bc9832b0c25599d6dbab7066b439b5720c5f6312050ab05f5f86301a638eb0e1121d3bbf961ecf8c43e81387f99c70982e6f7101d2034697e2346e78edd441ed9cc81b66ff0cc43417cebb663031207e728eba7fb735f16471255d590a9fea05a4a90769101b0ea2b48af43effc4f4f10f9c31094572ef62dda96a2179982569693c398377582ad98f618610b7e9e874512a7920ed4f3d3da2d1709530f6cf4a7366acad315e9fd14f5fbdf2e7b56e5232d3ea1861316e029e5430623a6b8641b966c3a8830f78e528fa33ab89e06c3b312b3318b0ac70f7403457f2ebdd2994185c0cbaa8c2336164ee00f64ad2fca7d688327f792a5c8a6a3886193399448bdc7dcf9c01357a1b5a0c59fd5375b187823e12bae5750ad8dce8f0ccc079fa65139e50449f04083c61cbc62d3f291e98200f12d6e97c57ef1f505ba7ec1424002bbac0c004fcfbdae2d979c8f230c499e8aa574d8903adb72c198674e5b02baaf8d43d7916e96b6eea8111a3f59f3da9b952266589dde624e8b614a6a79a498336bbfbebde306ffc914a3c54e10c836f92e370f3b7d5a97a7bc30bf4cd5b1177d5a513b661f42a5ece661804763ba1e746c94b3e7e73358ce63c3efcdfdb82b6098f84155d5ab740b8b45195e9f905da8337dff36be2aaa0df8f53f0fcb3a8b4b5d47e028841547fb5a5a545ba85176c37bfebadcd03630145484a635ca5ddd88855a631d2a10d3777ae23812a686c69f3c3122d0226d83053e218d5a2cb23403364df2c77805082769340c593d9c97a752dd61c5771f6db3b1b31254027ce32271bcb2200fb01391760e361db912e1d996880ad49a4290e31f7ae5a4052c381321b5b19a323d989629c7f3bae9b2238095ce74284c649cbf51b9b7431a68150c6f512bd84596a290cfb3e0e42183378f3a7bccdef24c75231ffc32a2923f91f37ae4a70ff7b0ac148372a3b26eed984069024cbec53599b842cc023a4604045914d335b598d15ea16db7a3dc0d4cd92533b99c9874cbc94e923d5ca2e0f626e17bcbb574b95bc3a0265a00adae527fade2ff46c52c67ff651253ad63b8acf8bd2e46d1d0c6cd5b261033a3119caf70fac726e076241a4ac8ba8115eedb0aa26d0b66c953c7a0b012b878da1b60e07556c667c90d9e77791b6cd852ba2bd6ee1d682e87fde8ad35aca3c117cf73dcfa5ba5a9a454c5c856c719d7a17fb1f1c0a9b680482e3c3c0841b8bf401cff2da46bf44d5408eadfbb571536940b4a80035d65aa087478c03aa97bc48db9d503fa15fd9cbfb39db49897a68a32b2367185f32b468c1caeaffaa2babc7b55aeebde1c98ffcd473ad3237dacfab10ec5298d25843093bb557c1431c95cfb6c2e20af997b8b3bc393fb1fea12a8122d70a58034e4f2677f9f7494edf2678b7d6b17ff55288af722cf51038fe0d5a6d66ec5cfc9ff2e556607c254e5d6a2ab011dc7216551d22ec9042f8bcef9f001a0d9c81019e3188cb6219815d60dc3dfb57f28b2d5db0a9d777e7", 0xfe32}], 0x1}, 0x0)

01:05:38 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:38 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1395.518649][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1395.524482][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:05:38 executing program 4:

01:05:38 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb)
keyctl$unlink(0x9, r2, 0xfffffffffffffffb)

01:05:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffc7c, &(0x7f0000000000)={0x0, 0xfffffffffffffee9}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4612203fa8614527f78db539ce2eb99150d89a8762a6dda041e9ffffff00"], 0x2c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="1c0000001a00", 0x6)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1395.728682][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:39 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000ac0)=0xe8)
quotactl(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
getdents(r1, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10)
r3 = accept(r2, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0)

[ 1395.835129][ T2901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1396.238628][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1396.244953][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1396.251432][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1396.257657][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:41 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:41 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57}], 0xfffffffffffffcaa, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:41 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:41 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x8002, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="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", 0xfe32}], 0x1}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)

01:05:41 executing program 4:
socket$alg(0x26, 0x5, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0)
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000000, 0xa)
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000640)={0x39, 0x4, &(0x7f0000000000)=[0x0, 0x461, 0x4, 0x0], &(0x7f0000000280)=[0x6, 0x6, 0x1, 0x3, 0xff, 0xf48a, 0x1], &(0x7f0000000600)=[0x200, 0x0, 0x0, 0x8, 0x8000, 0x0]})
pipe(&(0x7f00000000c0))
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$binfmt_misc(r4, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, '\x00', {'syzkaller1\x00'}, 0x7})
sched_setattr(0x0, 0x0, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x7}, 0x0)
r6 = socket(0xa, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000003780)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/79, 0x4f}], 0x5, &(0x7f00000016c0)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000000980), 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/75, 0x4b}, {&(0x7f0000000140)=""/62, 0x3e}, {0x0}, {&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f0000000b80)=""/48, 0x30}, {&(0x7f0000000bc0)=""/169, 0xa9}, {0x0}, {&(0x7f0000000cc0)=""/188, 0xbc}], 0x8, &(0x7f0000000e40)=""/59, 0x3b}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/255, 0xff}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000fc0)=""/223, 0xdf}, 0x1}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001300)=""/101, 0x65}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f00000013c0)=""/169, 0xa9}, {&(0x7f0000001540)=""/126, 0x7e}], 0x6}, 0x9}], 0x4, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
vmsplice(r7, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0xffffffff, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSETSW(r8, 0x5453, 0x0)
accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e)

01:05:41 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

[ 1398.580236][ T3026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:41 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:41 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1398.706498][ T3037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:42 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(0xffffffffffffffff)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1398.786283][ T3143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:42 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x8002, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="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", 0xfe32}], 0x1}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)

01:05:42 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(0x0)
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1398.870792][ T3145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:42 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0)

[ 1399.005292][ T3154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1400.398702][    C1] net_ratelimit: 16 callbacks suppressed
[ 1400.398712][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1400.410837][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1400.416701][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1400.423024][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1401.038683][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1401.045674][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1401.118678][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1401.125101][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:44 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:44 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(0x0)
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:44 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

01:05:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:44 executing program 4:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000900000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

01:05:44 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
read(r0, &(0x7f0000000900)=""/4096, 0x1000)

[ 1401.694222][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:44 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r4)

[ 1401.758645][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1401.764608][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1401.771493][ T3330] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1401.782879][ T3330] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 458752)!
[ 1401.794404][ T3330] EXT4-fs (loop4): group descriptors corrupted!
01:05:45 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

01:05:45 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(0x0)
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:45 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r4)

01:05:45 executing program 4:
r0 = socket(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="d4020207e0000001"], 0x1)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8b0229"], 0x1)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="b1", 0x1)
recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)='#', 0x1}], 0x1)
dup2(r1, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10)
r2 = socket(0x2, 0x8002, 0x0)
connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e00000012000"], 0x10)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0)
pwritev(r3, &(0x7f00000003c0), 0x273, 0x0)
execve(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0x0)
write(r2, 0x0, 0x0)

[ 1402.033935][ T3450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:45 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1402.225071][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:47 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, [0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a96, 0x7, 0x0, 0x20, 0xfffffffffffffff8, 0x6]}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000480)={@any, 0x3ff, 0x1ff, 0x3, 0x4, 0x4, "06414109b867817db323be4dc801e0b94dbf6427c3e3c34aa073f0a6f1dd3ca012a77df971a21db6dd69b0b0bff831217b1253067ecdb73d25812d2c61b67544300de64e417f729e345a8e49ed128f22c15a4738e2c1f3820cb841cfbdc0ad49982160e90e7cfd2c4c00e5a9caa8af8025e47f00a7d2a06650b32a0fba7a8d7f"})
socket$inet(0x2, 0xa, 0x11)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}})
keyctl$get_keyring_id(0x0, r2, 0x7fffffff)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2b, 0x801, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0)

01:05:47 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r4)

01:05:47 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:47 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000080)="8fc231f97a37303e26")

01:05:48 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)
shmctl$IPC_RMID(r3, 0x0)
shmdt(r4)

[ 1404.816820][ T3478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0})

01:05:48 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, [0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a96, 0x7, 0x0, 0x20, 0xfffffffffffffff8, 0x6]}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000480)={@any, 0x3ff, 0x1ff, 0x3, 0x4, 0x4, "06414109b867817db323be4dc801e0b94dbf6427c3e3c34aa073f0a6f1dd3ca012a77df971a21db6dd69b0b0bff831217b1253067ecdb73d25812d2c61b67544300de64e417f729e345a8e49ed128f22c15a4738e2c1f3820cb841cfbdc0ad49982160e90e7cfd2c4c00e5a9caa8af8025e47f00a7d2a06650b32a0fba7a8d7f"})
socket$inet(0x2, 0xa, 0x11)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}})
keyctl$get_keyring_id(0x0, r2, 0x7fffffff)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2b, 0x801, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0)

01:05:48 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)
shmctl$IPC_RMID(r3, 0x0)

01:05:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, [0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a96, 0x7, 0x0, 0x20, 0xfffffffffffffff8, 0x6]}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000480)={@any, 0x3ff, 0x1ff, 0x3, 0x4, 0x4, "06414109b867817db323be4dc801e0b94dbf6427c3e3c34aa073f0a6f1dd3ca012a77df971a21db6dd69b0b0bff831217b1253067ecdb73d25812d2c61b67544300de64e417f729e345a8e49ed128f22c15a4738e2c1f3820cb841cfbdc0ad49982160e90e7cfd2c4c00e5a9caa8af8025e47f00a7d2a06650b32a0fba7a8d7f"})
socket$inet(0x2, 0xa, 0x11)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}})
keyctl$get_keyring_id(0x0, r2, 0x7fffffff)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2b, 0x801, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0)

[ 1405.123525][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1405.918773][    C0] net_ratelimit: 18 callbacks suppressed
[ 1405.918782][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1405.931244][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1406.638696][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1406.644510][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1406.650302][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1406.656065][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1407.278690][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1407.284474][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1407.358702][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1407.364493][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:51 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:51 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
shmdt(r4)

01:05:51 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:51 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000240)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

01:05:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, [0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a96, 0x7, 0x0, 0x20, 0xfffffffffffffff8, 0x6]}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000480)={@any, 0x3ff, 0x1ff, 0x3, 0x4, 0x4, "06414109b867817db323be4dc801e0b94dbf6427c3e3c34aa073f0a6f1dd3ca012a77df971a21db6dd69b0b0bff831217b1253067ecdb73d25812d2c61b67544300de64e417f729e345a8e49ed128f22c15a4738e2c1f3820cb841cfbdc0ad49982160e90e7cfd2c4c00e5a9caa8af8025e47f00a7d2a06650b32a0fba7a8d7f"})
socket$inet(0x2, 0xa, 0x11)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}})
keyctl$get_keyring_id(0x0, r2, 0x7fffffff)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2b, 0x801, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0)

01:05:51 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071")

01:05:51 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x3000)

[ 1407.911439][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:51 executing program 4:
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffffff, 0x40001)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup2(r0, r1)

01:05:51 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, 0x0, 0x10000000000443)

01:05:51 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:51 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)

01:05:51 executing program 3:

[ 1408.216270][ T3851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:54 executing program 3:

01:05:54 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:54 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, 0x0)

01:05:54 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

01:05:54 executing program 4:

01:05:54 executing program 4:

[ 1410.992469][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:54 executing program 3:

01:05:54 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x3000)

01:05:54 executing program 4:

01:05:54 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:54 executing program 4:

01:05:54 executing program 3:

01:05:54 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000000)=""/107)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

[ 1411.310017][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1411.438737][    C0] net_ratelimit: 16 callbacks suppressed
[ 1411.438748][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1411.450408][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1411.518628][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1411.524583][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1412.158654][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1412.164487][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1412.878753][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1412.884655][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1412.890439][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1412.896167][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:05:57 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:05:57 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:57 executing program 4:

01:05:57 executing program 3:

01:05:57 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = semget$private(0x0, 0x4, 0x2c0)
semop(r2, &(0x7f0000000180)=[{0x3, 0xa71, 0x2800}, {0x6, 0x1, 0x3800}, {0x7, 0x0, 0x800}, {0x8ee7c09130f56b56, 0x3f, 0x2522d3a3ae2a1be1}], 0x2aaaaaaaaaaaaca1)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:05:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, 0x0)

01:05:57 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:05:57 executing program 3:

[ 1414.132084][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:05:57 executing program 4:

01:05:57 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
semget$private(0x0, 0x4, 0x2c0)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:05:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0xfcec}], 0x1}, 0x0)

01:05:57 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0), 0x4)

[ 1414.367264][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:00 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:00 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:06:00 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140))
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:00 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

01:06:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)

01:06:00 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, 0x0)

[ 1417.038699][    C1] net_ratelimit: 16 callbacks suppressed
[ 1417.038706][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1417.050360][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1417.056236][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1417.062160][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:00 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

[ 1417.170698][ T4052] bond0: cannot enslave bond to itself.
01:06:00 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xfffffdfffffffffc, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x10}, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c)
syz_open_dev$midi(0x0, 0x957, 0x80000)
listen(r0, 0x200000000002)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x140})
read(r2, &(0x7f0000000300)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, <r5=>0x0}, &(0x7f0000000240)=0xc)
setresuid(r5, r5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
sendfile(r7, r6, 0x0, 0x7ffff000)

01:06:00 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

[ 1417.304263][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:00 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32, @ANYBLOB="443c3d3c834cfa9d683826e7673405fcda4522e51baaeb8b90a6f914cd"], 0x50}}, 0x0)

01:06:00 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140))
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:00 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

[ 1417.617414][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1417.678639][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1417.684453][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1417.758686][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1417.764533][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1418.398716][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1418.404665][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:03 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140))
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:03 executing program 5:
r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x4000)=nil, 0x2000)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:06:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000))

01:06:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3)

01:06:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:03 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x41c4})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)

01:06:03 executing program 5:
shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:06:03 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0}}], 0x1, 0x0)

[ 1420.449308][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:03 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x0, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:03 executing program 5:
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000)

01:06:04 executing program 5:
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0)

[ 1420.752593][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:04 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x41c4})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)

01:06:04 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x0, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1421.115414][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1422.558674][    C0] net_ratelimit: 18 callbacks suppressed
[ 1422.558681][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1422.570264][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1423.278692][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1423.284619][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1423.290494][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1423.296273][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:06 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:06 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:06 executing program 5:
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/90, 0x5a}]}}], 0x1, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0)

01:06:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000))

01:06:06 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x0, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:06 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10)

01:06:06 executing program 3:
socket$inet6(0xa, 0x3, 0x2)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x200040000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @empty}}, 0x1c)

[ 1423.486846][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1423.530122][ T4666] RDS: rds_bind could not find a transport for ::fc00:ffff:0:0, load rds_tcp or rds_rdma?
[ 1423.559602][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:06 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10)

01:06:06 executing program 5:
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/90, 0x5a}]}}], 0x1, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0)

01:06:06 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, 0x0)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:06 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20001380, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

01:06:07 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xe, 0x1, [], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}}, &(0x7f0000000380)=""/249, 0x36, 0xf9, 0x8}, 0x20)

[ 1423.912948][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1423.922289][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1423.922317][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1423.998637][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1424.033468][ T4790] BPF:[1] VAR (anon) 
[ 1424.039447][ T4790] BPF:type_id=1 linkage=243
[ 1424.044126][ T4790] BPF: 
[ 1424.047109][ T4790] BPF:Invalid name
[ 1424.059613][ T4790] BPF:
[ 1424.059613][ T4790] 
[ 1424.072306][ T4790] BPF:[1] VAR (anon) 
[ 1424.079779][ T4790] BPF:type_id=1 linkage=243
[ 1424.086116][ T4790] BPF: 
[ 1424.096246][ T4790] BPF:Invalid name
[ 1424.100450][ T4790] BPF:
[ 1424.100450][ T4790] 
01:06:09 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xe80, 0xe000600, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab840213f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)

01:06:09 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:09 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, 0x0)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:09 executing program 5:
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/90, 0x5a}]}}], 0x1, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0)

01:06:09 executing program 3:
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x2000000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000))

01:06:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x11, r2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0)
io_setup(0x5b3, &(0x7f00000001c0)=<r4=>0x0)
io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}])
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x1cd4000a, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100))
poll(&(0x7f0000000000)=[{r2, 0x2}, {r3}, {0xffffffffffffffff, 0x2080}], 0x3, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0)

01:06:09 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(morus640-sse2)\x00'}, 0x58)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1426.589018][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:09 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0xfffffffc}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20)

01:06:09 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, 0x0)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1426.850399][ T4953] BPF:	 type_id=3 offset=4294967292 size=0
[ 1426.880952][ T4953] BPF: 
[ 1426.884019][ T4953] BPF:Invalid offset
[ 1426.917127][ T4953] BPF:
[ 1426.917127][ T4953] 
01:06:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[], 0x0, 0x0, 0x7d04})

[ 1426.943537][ T4953] BPF:	 type_id=3 offset=4294967292 size=0
[ 1426.957411][ T4953] BPF: 
[ 1426.967060][ T4953] BPF:Invalid offset
[ 1426.984561][ T4953] BPF:
[ 1426.984561][ T4953] 
[ 1427.003326][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:10 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

01:06:10 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700))
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

[ 1427.318847][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1428.078678][    C0] net_ratelimit: 18 callbacks suppressed
[ 1428.078685][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1428.090282][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1428.158697][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1428.164527][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1428.798701][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1428.804473][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x4, &(0x7f0000000000))

01:06:12 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

01:06:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0b")

01:06:12 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700))
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x11, r2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0)
io_setup(0x5b3, &(0x7f00000001c0)=<r4=>0x0)
io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}])
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x1cd4000a, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100))
poll(&(0x7f0000000000)=[{r2, 0x2}, {r3}, {0xffffffffffffffff, 0x2080}], 0x3, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0)

[ 1429.518638][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1429.524476][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1429.530287][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1429.536059][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1429.709412][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700))
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @ioapic})

01:06:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="0a70dff30f7e96ef009acac70300660f38813d2665d2530964650f01d1650fa266b8010000000f01d9baf80c66b8ecd35e8866efbafc0ced0fc7ac0000", 0x3d}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:13 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @xdp, @isdn})
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x7f000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1430.133359][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:13 executing program 3:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = getpid()
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r0, &(0x7f00000000c0)={r1})

01:06:13 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
sendfile(r0, r1, 0x0, 0x88001)

01:06:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27)

01:06:15 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:15 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:15 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

01:06:15 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000eeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000007a0a00fe00000000850000000d000000b70000000000000095000000000000001c26d2bff0fa454225b2efe59bb842889c95ef1ba79618689974e65251a831de1911e7ce9427b8fe59cc6bf6d3d8e0d9cf48cbb64f53c8197a991a5ad5b2b132abe5a4ff9e3d04d67748c4d0f7034eb8fc284872b4dcc8c365d99548b4fc3d8640f90c0c6b060f2a67d98f03848c8e3868229bba8647ca373da549ae6c972806fc7de1d287ed25f137d95275fbd100dd1046e9b0febe762635bd20f62a827bc127fd8969a01c5a6deca9cedd561e7d955df8a6cda5047fbead7ee7e76d4b870024b85bfc7f64b4d1a13e79c4fb0b7773bc90cb99eded466d80b384ee396f80910953a83327277c3727abd16deb03effda7e880eb5e807e180dd792b87ffd5f455dd7ec613366c646f31b60e7197f04403a0382ad7b10f107509145000000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

01:06:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0b")

01:06:16 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000eeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000007a0a00fe00000000850000000d000000b70000000000000095000000000000001c26d2bff0fa454225b2efe59bb842889c95ef1ba79618689974e65251a831de1911e7ce9427b8fe59cc6bf6d3d8e0d9cf48cbb64f53c8197a991a5ad5b2b132abe5a4ff9e3d04d67748c4d0f7034eb8fc284872b4dcc8c365d99548b4fc3d8640f90c0c6b060f2a67d98f03848c8e3868229bba8647ca373da549ae6c972806fc7de1d287ed25f137d95275fbd100dd1046e9b0febe762635bd20f62a827bc127fd8969a01c5a6deca9cedd561e7d955df8a6cda5047fbead7ee7e76d4b870024b85bfc7f64b4d1a13e79c4fb0b7773bc90cb99eded466d80b384ee396f80910953a83327277c3727abd16deb03effda7e880eb5e807e180dd792b87ffd5f455dd7ec613366c646f31b60e7197f04403a0382ad7b10f107509145000000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

01:06:16 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:16 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, 0x0, 0x0)

[ 1432.825634][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:16 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:16 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:16 executing program 3:
perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="edd9000000000000"], 0x2000, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb})

[ 1433.205734][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:06:16 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(0xffffffffffffffff)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:16 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1433.553450][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1433.688624][    C1] net_ratelimit: 18 callbacks suppressed
[ 1433.688634][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1433.700110][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1433.705900][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1433.711735][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1434.318710][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1434.324546][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1434.398655][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1434.404446][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1435.038680][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1435.044468][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:18 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:18 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

01:06:18 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:18 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x26c, 0x0, &(0x7f0000000080)="020043d05d25b666cd783f4b231c", 0x0, 0x8e}, 0x28)

01:06:18 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0b")

01:06:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, 0x0, 0xfe52, 0x200004)

01:06:19 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:19 executing program 3:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500000000000000cba4b69102d809209046e82a80dbec88057977ca93667d31da90803f0d19a52cc05fa2be5390416d1f89be1a9963dcff0a9f38d4da855571f7d7c8147cd8fff1bee5a362cc39a9f7b10a66ae84c25465a18f444aa63edb959c1f0dfd78fa45d83cd28d719c1c9a917893befffe17ecf4845e7e8daaa5a214f561df6dabc6787bb423293a04b673f00a2125470470405bd1e5a65741e883f300cafc61c4348a324d1165e65eb4de84419fdff335737e4ea9a4edf959cd0b5f7ce641f0828164ec2ab663dbd464fa7f492236f4822546c55fec96c67b99d89cccf3be3f0bcefbe2102b4223f2a692ac04fef3e8f33caca618b15dcaca442dac39cb867d751a690eb842"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xfffffece, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

01:06:19 executing program 5:
syz_read_part_table(0x0, 0x1, &(0x7f0000000840)=[{&(0x7f0000000000)="0201540000001fffffffff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}])

01:06:19 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1436.225676][ T5991]  loop5: p1[DM] p2[EZD] p3 p4
01:06:19 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x400010)

[ 1436.248006][ T5991] loop5: partition table partially beyond EOD, truncated
[ 1436.260990][ T5991] loop5: p1 start 4294967071 is beyond EOD, truncated
[ 1436.283856][ T5991] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 1436.293133][ T5991] loop5: p3 size 1912633224 extends beyond EOD, truncated
[ 1436.306031][ T5991] loop5: p4 size 32768 extends beyond EOD, truncated
[ 1436.562594][ T5991]  loop5: p1[DM] p2[EZD] p3 p4
[ 1436.571913][ T5991] loop5: partition table partially beyond EOD, truncated
[ 1436.602289][ T5991] loop5: p1 start 4294967071 is beyond EOD, truncated
[ 1436.644448][ T5991] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 1436.671542][ T5991] loop5: p3 size 1912633224 extends beyond EOD, truncated
[ 1436.690681][ T5991] loop5: p4 size 32768 extends beyond EOD, truncated
01:06:22 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:22 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x400010)

01:06:22 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:22 executing program 5:
timer_create(0x2, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f00000001c0))

01:06:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847")

01:06:22 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

01:06:22 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="aac3e27c1265ea3f6fa8c16325486743b02d69a34eae30d3eb6ab99dfd11a5356e2afbc0bfffa6ab48797ccb438508db1492163a93243f33d6d1af603c203048e1e6f5bed65541fad61b9e88d77e3a8d9fb7577f35709d8f518161a802f9e1f2b6af193b8efac08bbc892000bd0e3701a4184f8756208e5edee43c", 0x7b}, {&(0x7f00000001c0)="a8d24e4e5fa528bfcdf8e738208283d78d3af6254dd9b7eabad6b87bbbc76433f47fae50d8ea46540c48355def151f2e88405460678b56a60e6f6244b0b1709985e0a65d7be70866e7dcad78b36798c02ec6806639f6df0f0595614354cd38", 0x5f}, {&(0x7f00000002c0)="b36d6032b5013d99d4794cd3eefbf5fdc0eafd422911db120e70b02f22029d43e9fd723e074fbcb8f9d6ee6f29ae8acce5a4197d723b05c999f805d804f0401c3f932bd2b2911031d98120f41bc70ae82ecce44e615c053019dcfd4c50d6873cbd98808c02e8ce18fef5998705331785447c09c1c73aba1549cd51f69616393544b177db8e07c34349b4499f5200", 0x8e}, {&(0x7f0000000240)="54750caea8e052", 0x7}, {&(0x7f00000004c0)="d8e88c76cecd56fdb34d4d9373f27a4ae6172956253b700d479834555169a04ed32b974f4f5107d2d24dff4314b8e50bb7daacfa71e28200d25db9789c837a243f62882075a3c07d8b6a8a72c65ad683d36b1fbfa60eb6eb762a5b17ae5f31322c79ee74f04f6e9692600b192431154f90dad93a346a7b5bef7975271f8be54d2a179fe4a7ac98a765350e649d94dc9c639c0780b24a57d68d4774a9c449e14745a09bfe075a2728521e89138d038728f15a", 0xb2}], 0x5}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

[ 1439.030149][    C0] net_ratelimit: 19 callbacks suppressed
[ 1439.030162][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:06:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x400010)

01:06:22 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

[ 1439.198664][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1439.204486][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:22 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32, @ANYBLOB="96f47bc9e73d8e58347db0a4ca5312a94b0e9ee6e094926355fb6b1a2f77f07703629b687a918678c9d8ad9a404b567539de52be1faa405d7960bbe549065a628dc5178ff0ccd20a78707f647698c2631596f99e173d5aadb15a59246f291eedb0bdd05202d1cbec6d2f6b85c52a49643d6d4b3f11b0be75bebc00d085f18d560e67432b4ec89a756f4f62e709e6a1006d7bc8fe633c0ef17248f732221ac1c78b30c3b5393b8bb98a556a25c05e1bf84efa48110c10e3886b5c8eaa27088f1c7972c2daa68e65e3e422d1ff73a1e9a7691d332f354161dbfe79f0824a1c9f33fbc1fda25091bdeb8dffc49fbb"], 0x3c}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:06:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x400010)

[ 1439.418532][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1439.928631][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1439.934428][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1439.940227][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1439.946193][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1440.558662][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1440.564450][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1440.638712][    C1] protocol 88fb is buggy, dev hsr_slave_0
01:06:25 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:25 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

01:06:25 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x40000000000)

01:06:25 executing program 3:
socket$inet6(0xa, 0x0, 0x0)
pipe(&(0x7f00000003c0))
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')

01:06:25 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400050000000000000000", 0x24)

01:06:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847")

01:06:25 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0)

01:06:25 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x1eb}, {0x0}, {0x0, 0xff52}, {&(0x7f00000001c0)="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", 0x65}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffd62, 0x0, 0x6a, 0x0, 0xfffffc1b}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x3c)

01:06:25 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfffffffe, 0xb}, {0x80000008, 0xfffffffc}]})

01:06:25 executing program 5:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = gettid()
tkill(r0, 0x1000000000016)

[ 1444.088669][    C1] net_ratelimit: 14 callbacks suppressed
[ 1444.088675][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1444.100210][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1444.106146][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1444.112165][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1444.718639][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1444.724631][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1444.798694][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1444.804550][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:28 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:28 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:28 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000008000000850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000400)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r1}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10)

01:06:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}}, 0x0)

01:06:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847")

01:06:28 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, 0x0, 0x0)

01:06:28 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48)

[ 1445.238157][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
01:06:28 executing program 4:
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:28 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x50)

01:06:28 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/30, 0x1e}], 0x1}}], 0x4000156, 0x0, 0x0)

01:06:28 executing program 4:
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1445.438641][    C0] protocol 88fb is buggy, dev hsr_slave_0
01:06:28 executing program 4:
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:31 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:31 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x80044100, 0x0)

01:06:31 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000))

01:06:31 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780")

01:06:31 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, 0x0, 0x0)

01:06:31 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:31 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1448.433150][ T7089] IPVS: ftp: loaded support on port[0] = 21
01:06:31 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:31 executing program 3:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR, @ANYPTR64, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYPTR64, @ANYRESHEX, @ANYRES16]], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)

01:06:31 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
getpid()
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1448.733104][ T7100] ceph: No path or : separator in source
[ 1448.953437][ T7089] IPVS: ftp: loaded support on port[0] = 21
[ 1449.338654][T14269] tipc: TX() has been purged, node left!
[ 1449.598685][    C0] net_ratelimit: 20 callbacks suppressed
[ 1449.598692][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1449.610191][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1450.318650][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1450.324465][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1450.330723][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1450.336594][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1450.698786][T14269] tipc: TX() has been purged, node left!
[ 1450.958667][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1450.964475][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1451.038787][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1451.045002][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:34 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

01:06:34 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:34 executing program 3:
unshare(0x20020400)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c)

01:06:34 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, 0x0, 0x0)

01:06:34 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:34 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780")

[ 1451.361323][ T7216] IPVS: ftp: loaded support on port[0] = 21
01:06:34 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:34 executing program 3:
unshare(0x20020400)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c)

01:06:35 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:35 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:35 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1452.021489][ T7347] IPVS: ftp: loaded support on port[0] = 21
01:06:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20048080)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6)
connect(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780")

[ 1452.888646][T14269] tipc: TX() has been purged, node left!
[ 1453.088676][T14269] tipc: TX() has been purged, node left!
01:06:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

01:06:37 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:37 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300), 0x0)

01:06:37 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:37 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:37 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000180))

[ 1454.483261][ T7470] IPVS: ftp: loaded support on port[0] = 21
[ 1454.553097][ T7477] IPVS: ftp: loaded support on port[0] = 21
01:06:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc04", 0x5)

01:06:37 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:37 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:38 executing program 1:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, 0x0, 0xfe52, 0x200004)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:06:38 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1454.874077][ T7594] IPVS: ftp: loaded support on port[0] = 21
[ 1454.939033][ T9355] tipc: TX() has been purged, node left!
01:06:38 executing program 1:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, 0x0, 0xfe52, 0x200004)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 1455.118694][    C0] net_ratelimit: 18 callbacks suppressed
[ 1455.118702][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1455.130166][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1455.198702][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1455.204530][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1455.838644][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1455.844443][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1456.568698][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1456.574546][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1456.580347][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1456.586106][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1456.768683][T14281] tipc: TX() has been purged, node left!
01:06:40 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

01:06:40 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:40 executing program 1:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)="c4", 0x1}], 0x1}, 0xfc)

01:06:40 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300), 0x0)

01:06:40 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

01:06:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b})

[ 1457.677270][ T7716] IPVS: ftp: loaded support on port[0] = 21
01:06:41 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:41 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0)

01:06:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0))
getdents64(r0, &(0x7f00000041c0)=""/4126, 0x101e)

01:06:41 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0))
getdents64(r0, &(0x7f00000041c0)=""/4126, 0x101e)

[ 1458.718711][T14281] tipc: TX() has been purged, node left!
01:06:43 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:06:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:43 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:43 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff})

01:06:43 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300), 0x0)

01:06:43 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

[ 1460.718625][    C1] net_ratelimit: 16 callbacks suppressed
[ 1460.718631][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1460.730150][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1460.735948][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1460.741738][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1460.795119][ T7974] IPVS: ftp: loaded support on port[0] = 21
01:06:44 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:44 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50)

01:06:44 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

01:06:44 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff})

01:06:44 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50)

01:06:44 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000000380)=""/169, 0xa9)

[ 1461.358628][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1461.364456][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1461.438656][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1461.444493][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1461.908672][T14281] tipc: TX() has been purged, node left!
[ 1462.078672][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1462.084669][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:47 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:06:47 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

01:06:47 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff})

01:06:47 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db9", 0x12)

01:06:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

01:06:47 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

[ 1463.951560][ T8250] IPVS: ftp: loaded support on port[0] = 21
01:06:47 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

[ 1464.042943][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1464.068854][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1464.097271][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1464.117145][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
01:06:47 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/169, 0xa9)

01:06:47 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, 0x0, 0x0)

01:06:47 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
sysfs$3(0x3)

01:06:47 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, 0x0, 0x0)

[ 1464.699200][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
01:06:48 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x760)
getdents(r0, 0x0, 0x0)

[ 1465.208660][ T9355] tipc: TX() has been purged, node left!
[ 1466.238703][    C0] net_ratelimit: 18 callbacks suppressed
[ 1466.238713][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1466.250151][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:50 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x4c})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

01:06:50 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
sysfs$3(0x3)

01:06:50 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db9", 0x12)

01:06:50 executing program 3:
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x9d, 0x0, &(0x7f0000000080)="0000000000000000000000001000", 0x0, 0xdc}, 0x28)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)

01:06:50 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

01:06:50 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

[ 1466.968653][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1466.974567][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1466.980347][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1466.986088][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1467.118803][ T8417] IPVS: ftp: loaded support on port[0] = 21
01:06:50 executing program 3:
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
clock_gettime(0x2, &(0x7f00000002c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000004c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/929], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r0 = getpid()
tkill(r0, 0x9)

01:06:50 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
sysfs$3(0x3)

01:06:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae64, 0x0)

01:06:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x4cb], 0x12000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:50 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{}, {0xbf}})

01:06:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)

[ 1467.598633][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1467.604437][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1467.678664][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1467.684573][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1467.998658][T14277] tipc: TX() has been purged, node left!
01:06:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)

01:06:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/43)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @multicast2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000015c0), 0x0, 0x0)

01:06:53 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@local}, [@srcaddr={0x4, 0xd, @in6=@empty}]}, 0x3c}, 0x8}, 0x0)

01:06:53 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db9", 0x12)

01:06:53 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)

[ 1470.254422][ T8749] IPVS: ftp: loaded support on port[0] = 21
01:06:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/43)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e21, @multicast2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000015c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}], 0xf}], 0x1, 0x0)

01:06:53 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:53 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:53 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/43)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e21, @multicast2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000015c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}], 0xf}], 0x1, 0x0)

01:06:54 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x25d)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
inotify_init1(0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

01:06:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1471.102458][T29778] tipc: TX() has been purged, node left!
01:06:54 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400", 0x1b)

01:06:54 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/43)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e21, @multicast2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000015c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}], 0xf}], 0x1, 0x0)

01:06:54 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:54 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'memory', 0x7}]}, 0x90e7)

[ 1471.466232][ T9001] IPVS: ftp: loaded support on port[0] = 21
01:06:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5, 0x0, @perf_bp={0x0}, 0x0, 0x4000000005})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040))
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)

01:06:54 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/43)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e21, @multicast2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000015c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}], 0xf}], 0x1, 0x0)

[ 1471.758627][    C0] net_ratelimit: 16 callbacks suppressed
[ 1471.758638][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1471.770306][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1471.838654][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1471.844629][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:55 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5, 0x0, @perf_bp={0x0}, 0x0, 0x4000000005})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040))
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)

01:06:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0)
pipe(&(0x7f0000000680))

01:06:55 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1472.237948][ T9029] kvm: pic: single mode not supported
[ 1472.240473][ T9029] kvm: pic: single mode not supported
01:06:55 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400", 0x1b)

[ 1472.247052][ T9029] kvm: pic: single mode not supported
[ 1472.292713][ T9029] kvm: pic: single mode not supported
[ 1472.478638][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1472.489967][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:06:55 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:55 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0)

01:06:55 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:55 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5, 0x0, @perf_bp={0x0}, 0x0, 0x4000000005})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040))
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)

01:06:55 executing program 1:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4003)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
close(r0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='\x00'], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00'], 0x0)

01:06:56 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1472.967173][ T9068] IPVS: ftp: loaded support on port[0] = 21
01:06:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:06:56 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)

[ 1473.198637][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1473.204498][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1473.210310][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1473.216352][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:06:56 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:56 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e787400", 0x1b)

01:06:56 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

01:06:56 executing program 1:

01:06:57 executing program 4:
r0 = getpid()
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x352}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r2 = fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fanotify_mark(r2, 0x51, 0x2, r3, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1ff}, 0x9c)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r5, 0x0, 0x90)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x40408c1)
getpid()
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300030000000800000400000000e9ca"], 0x1}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a30e2116844013b11adb21dc4314ed8af2516d4d4088d90151eec3f5bf0579e590cf35826a852d3a7793b727797ba5fb96b66eacb12bcb92a47ab8c6a9be6176a0df7d72c00fef3671ebfb551ab67f2a8700f9d3a8957a384b022fddf4d3f5e806c627b57564c8e0ada0000000000000000000000000000002c311f47131801d4a854b8199e66d54fe3800d2d45667da9e5c91c6cdea29e6b72804fd0c131aec1423c00422a68c74072bf0c8cdb5107ff233191e74265ceae772e07a53e1ae8da2382d15918ef38fbe7474b7a6ff0c8f85ada095228ab7267d257c0a0abed39318f7a55115ae5291ec2c9901244f1e59ffc5ed258084953e8ba090aa027eeb8e403023fe433f875584bb980f6b89e07de6b6916ea8d4b224429d260b2873c434c289a88f2576efaef305ece15188ab16038958038d2686d8a111d738a908aec5ff6dd889dfeb6c0e559e5eda99fac54e1dcc222b946e45ff3696064a94c7ae6218fafaea80e0ef0dcc2dc0b402452b136b58fb3e6e90fd8abe722425310afae4f83a7a2b5d115862f9fb90c5feaac7ba50707511cd6ebbcfabfb9ec57fbc9d1cc84a4de309497530f10ecacccf9f99a19010374035ee477896d37174c78ea49df15bdcc9bd390dbc4d04270b00ebda39dec96171052cb8912c1fc7f4cac9c76ae0db08cad36737ff7853f535ebedc929832e8d74eadb9d0bebfeb237860115f9643534310a29d6c206e42be06ebf29752ffad86f9b4aa1e05ccf478ec93a5deaa4b92b77a4d10eb92e0d9493a8c979eaad640c9250e2ab4"], 0x23a)
getsockname$netlink(r7, &(0x7f0000000000), &(0x7f0000000140)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)

01:06:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:57 executing program 5:
unshare(0x40000000)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:57 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$P9_RCLUNK(r0, 0x0, 0x0)

01:06:57 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[]]}, 0x80)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev}, 0x134})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x238}, {&(0x7f0000000000)=""/62, 0xfffffffffffffcc3}], 0x2, 0x0, 0xfffffffffffffcd5, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

01:06:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700)
socket$netlink(0x10, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x6, 0x4, 0x4, 0x4, 0x24, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r0, 0xfffffffd}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28, &(0x7f0000000000)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r4}, 0xc)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$packet(0x11, 0x0, 0x300)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), 0x4)
sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="99382461f0b2477a1247f951a2b70bb3838cb3ae4170c44d88a4edef0859ac2bb48a0ba09ca59b4a5e6cce263c12d168247ba30250a83611b8d8b0e085bfb167aa443e16f5f07af3063f2b8a7102354616addf16c6b8ce4788af7b85e9978fc6f7c9b971d31a4fd60a2ee233d994b8829dcab0c805ed6b6088d1ae6d03d3e1a4a00fb78eb81b73bdf65d439513973bd49f719ce14a120049068a0b8de2b0e58a422aa01ab81faee93c13c87c89cd204c92c70550", 0xb4}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d0d37964b80b65039ce84112a96851ace540be7828e5c53336212c4177abfa377a9ec17d44f9f106f5a8f0b4ea8637f94126ae82c35adee78b59fe5d4656fc4ab950481ee951c6b0fd620dc55020f33a07b4cc80f8edf1f07cb3ab7dd4f26e142502c716843f6d38dcf17343ef22988da8b015d010a3e6d90fc2d06e024410ae69ac83e2a1839c8342c84c77306d7faa40ad7736adaca80c4edc06ff9010a3e5f9ae1eaf", 0xa4}, {&(0x7f0000001740)="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", 0xff}, {&(0x7f0000001840)="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", 0x1000}], 0x5, &(0x7f0000002840)=[@iv={0xa0, 0x117, 0x2, 0x87, "a9c07cf07fd42f7099e235e21ed79764ca7643126a8e52241a32635089200fd3fd1c164f788155958c0cdedbd5d81f59da6477f2c88f6ae5d104db66d0489f886145d9d08e9ee681557b4cbc4de874282886719e562168d7e8667b61b7fa8144af8f0ba446002d9481ec7a0d17396ea071aa39d3745bf9f2f275a8b1f33e31bffdcf2ea96ca789"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1100, 0x8000}, 0x81)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2801000010000507000000000000000000000001", @ANYRES32=r5, @ANYBLOB="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"], 0x128}}, 0x48080)

[ 1474.174636][ T9116] IPVS: ftp: loaded support on port[0] = 21
[ 1474.232045][T29778] tipc: TX() has been purged, node left!
[ 1474.238417][T29778] tipc: TX() has been purged, node left!
01:06:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1474.358804][ T9109] debugfs: Directory '9109-8' with parent 'kvm' already present!
01:06:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:57 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000", 0x20)

01:06:57 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700)
socket$netlink(0x10, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x6, 0x4, 0x4, 0x4, 0x24, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r0, 0xfffffffd}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28, &(0x7f0000000000)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r4}, 0xc)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$packet(0x11, 0x0, 0x300)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), 0x4)
sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="99382461f0b2477a1247f951a2b70bb3838cb3ae4170c44d88a4edef0859ac2bb48a0ba09ca59b4a5e6cce263c12d168247ba30250a83611b8d8b0e085bfb167aa443e16f5f07af3063f2b8a7102354616addf16c6b8ce4788af7b85e9978fc6f7c9b971d31a4fd60a2ee233d994b8829dcab0c805ed6b6088d1ae6d03d3e1a4a00fb78eb81b73bdf65d439513973bd49f719ce14a120049068a0b8de2b0e58a422aa01ab81faee93c13c87c89cd204c92c70550", 0xb4}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d0d37964b80b65039ce84112a96851ace540be7828e5c53336212c4177abfa377a9ec17d44f9f106f5a8f0b4ea8637f94126ae82c35adee78b59fe5d4656fc4ab950481ee951c6b0fd620dc55020f33a07b4cc80f8edf1f07cb3ab7dd4f26e142502c716843f6d38dcf17343ef22988da8b015d010a3e6d90fc2d06e024410ae69ac83e2a1839c8342c84c77306d7faa40ad7736adaca80c4edc06ff9010a3e5f9ae1eaf", 0xa4}, {&(0x7f0000001740)="80072cae8d764327a35ec97cc3fb03e53949c0cf91b875d4be7042f07ef812b564469d1ada52288789607d6a02ea18a88812828294c2314dbcb8bdf7ca345a1dae613d09d7ca90f267f6724e50c7fb514cbd9d7c382355ddf15f1f54d87341feb632d4a664358d828b72e9b071613075470f62ff97374e2d5b56aee3cb9d2d2d9e53915126306715c19339baf23dea90ad5c6f18c72815d1c0e223507227b9091d4058c0ed474e5b4ac0050a039ba8a689a6c2a5dc7c53038ec1d83085e7b38450f48f265cd5fea0d1b5d88a9837089d03c3681e24ce8a893294585352ab05a5fdcc3f02b0593466c84339896eedfd10b1a6a48ce82d7865b3264bac4930e4", 0xff}, {&(0x7f0000001840)="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", 0x1000}], 0x5, &(0x7f0000002840)=[@iv={0xa0, 0x117, 0x2, 0x87, "a9c07cf07fd42f7099e235e21ed79764ca7643126a8e52241a32635089200fd3fd1c164f788155958c0cdedbd5d81f59da6477f2c88f6ae5d104db66d0489f886145d9d08e9ee681557b4cbc4de874282886719e562168d7e8667b61b7fa8144af8f0ba446002d9481ec7a0d17396ea071aa39d3745bf9f2f275a8b1f33e31bffdcf2ea96ca789"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "4a70969c521cc29ea0ca5cc9d9b1360cc03183fca6f3ba478e23a205cac71f34e4f2468baa97962cb6f8a656352feb04c3ac4b0e6e7a4e0cb178a7225c1998acf856e81784993d540e8de4e6fbcda3f70519610c0e6d021791f1cf0d9989d1642a266177604e833743b6c17f5567d263bacda5839bd65ba713372680d41c345cc33d634e5c49ea1610367be812b67abcabd76d32ca832b3923b74d163735137b85c2b3b95631d4b3d6836721c6dd21cbbc04f99fb360559570f5fec52fda04e96bc82e5ca1da922e31d6122bd0f16a521e5313d408d4bb6d9647b7408a7fdb5673622e86003e2016e118b5053944cd95119249b112e245ccce50ceaf9a16b6bd18f4d4186dc144c1ed142075f8f95fce8648b1c459aed3f37f91012dab7abef0a94fcba9d783ed3c2c8d13dd8fe2be4992d95e6c431131ae67fc9704bdf78e4cb6f169fb4ce5ba17a385a4f2fd8b12f7e27360591a9d04c236c6ad49d531d08e119dd375b48429e40a9383fd8ca906c029f20dcd936f0b2868ab838619a58371cfc1bd4f559b3675f2310a1f54d47d755ad5241ff2ebe4da88d4b2cf297eb8af1bdf92cccd12e11dc8b215eb3435dea14cad12d640963c8ebbb6805e1cc318d7ad0186a7413a0915126175d3f59f73e61f4de606f405a508724340a07df40b9db56fdc33e3dcd2d884e6bf3996200be8354e3807a65a18858ed3e0456f1f16d270776292509a448aa59fdf6d951c6b310ad442bc8c96eaca328c6a41ded0e1c54ae8ffac459e5e63fe23d8025a3ffcaa6bb667041778f59875ff026fd682d434f143cd9d9d030e00dc10683f8ef762d5b77add56ef207e0cb39e8bb2056ca75d67780fb275dd3ba48c928f87fa0c3e91c0959a7a696fccb707ad984ec5abddeab3707db865299cc1200f02b9b604a9471d1bcf2cc9a3a8e8ee99536638ec8176cc43eda8b82f40f3676dbaae9dcc76bdc97deba039cf29720e98c0ae75069a09c7ad247324c4ce7f457c36d5c6ee27d2a45284217e9ce21d4c38e14af029fb3624839b4250de1cb53fed2b5356f8b1b67423a2a7b60f16f590d1fcf66eaa9b91aae9088f387a0dee08f5f4a62291ead2d76a1715f2a530b580a4650e479a06d6f93831e3961fc41ba145b73b32482200195dbd0881010bf5aab564628136966f0d993c6843378ed6b02b053cb4a417e6c63bf4df80e3cfdd50abc0035544b57aca8b924a1833e26c20d31483ab643b2da5193c696149d0bb368dbf3a01b8fde7e18c3e71fd56abf8451b8a283084f570c412dcc1c996d803bdb814c0b044515f3887161c1184ba4c6d938c51f24be363e92c9d0845bcf176b915b690df6e5b885b9df3a02562b4340692954d587cc7c3fbd57bb7e330ec372bc9024f7a4a60f69462a1d9bdb412d44e5658361f6d9e560c48a28d2e34b8a48af2bd55d20ea7cc9607ef6fba972cdea7a5bd312c4d4be73ebdbf48257509c8a58954116a3a6898d45d125850fbbb4216f6775aaebb812524e03f25e83b28365ee2e5352f3ee6d870f591a0e453d990db69eefa838d1fccbe46a0e2c25bbd1daa9070745cca76885e29cd4579c46d757d2f18561fc175bf4f0c481fe102fe15f88a14f2548c2a8516a4c68107bfaccfde0e8f1a7afe63689d489055eaf3ef20f8478b61aa05b8e7b391af7ac4d896b51425f7a2b7121a08da15dd063d90906eeaf84592bd99a84adcf9df13e581617e09499cb19d1d001c1df5175c0ff11abce29fe05bf935667a33798ee1e180f10d462d83b85424917d11638e6b7d659c016ea2bd9022a0e36b9afaf15bbd6e28201244a05b2249cc714981a8293fe40a3a7768543337c65613956230e40cf4f54f45db5f1b00910d0dea587e90f53319087bf8406783aaf1a5a9bf228f0305f168248a353c2de1f55afb129d47b0fa486961d8605da51e1ecab6c6d5d95dd049c6129e379305469d4ef2753fc0eba979ee19e23e60f025976ff780efde3fa61e9f5aafc5473b768c43e3d3ad478312b5568442711151116d7002dab0d48c78ca9f4bfd843f05c1eb7f23a870305d94b6e761d4294ce66c8de4946d60f6391ffcb041ff7cf0f7f8c74d631862405cb63c970bc9849e6a9a05e1a85b6715b3bbea5fd76cc710e0eea62b8d103a5877b984afc55aed34fda584ca052880a0ef38b20a94fbf3b0db0604cc9838023617afe5e135c9d580c97dd1270f3c22ce8cf31810cd0db5acafff8a52e811191414f92b2019472bda656088a16f8c313c450808685fd32e5fd42201feed4b4d51c4bca97c5ae2e0084bd5ad8b62eb8157dfdcd9f00f1f0a8dabf0065c87760ffa4f6799ef4f67b0a2cd6ede71ab05ce90bca6ec90e4903ced1b714bbc4f37a6d81a68dd7d8140e5f586214ffc397473919a5ca391c0733df49e70dd2bb6a3bd732f4a967430bc72e0097c494aa8f1eeeaf5cb093316792a480e5c2bddf0dc8d42f83835f43b56f2d07d227eddf2299a690009851ba69be3fe9cce03a32a39b05108a2dbe2a762cd721598d659bc3c8aff300e6e99d5bcfca54717ae5edfe32fbd307fa69d03da8db0498450e0c6774be8b8792def2ad17b729eca99ee1d269932c0a6b0faafad68aee21679becb76f2fb940607714d9c007ffef6de9a05fef7aea2e209760a1c645100b88e9bf8dfa60ac0ecdcbcc1fa3d02511747f70d0a14c13bea1750586452415301039bbeb85a1cee44b6decaae82b033db7cc9c92a95c3c3d5ae688825f7c0970d17f47b72c6a9dd0cd00107b77c13d67b7c4a0ed7bc248ce3c6046921d1e213bd3a93f28b7d1a447910a913684f7727a7ca3cbfe8b1d9946eb9221655da1b6ea5cb235de0bacce817d78fa4009e2e470a6562b09f711d7cb5600a5e17ad340f093e067ddb0d3dcad24227e02ba2d3330118fa022d6de894e7f5d06dfe09e311d4fc42cc40d969dd2c2fe79c7fcb84a910d1b4f928b8a89ff51139b8af6fe50da3ab4249843c4cedaa05886777be499d884107ce06ce6ab418b6cccc3bd0fe2582c0e3c3869ee7e654ec9e71fdcc4057048526d3fb16bebaa6cd1185967b077f223e56342fd9a0b554fae45d0e110141de54ecadd8cc6f151a64d026f588e811bc7dec56fb66dacccb3d0d3bb684cce2990c0540c9c48a6587882ae3e7bfc8e88407de35902e9c0066d4d52373ae7cd31919c1090186cc82dd686010c30a1de6061976418e786d7f81ff9eb35242f58cb9611b5a04b8d534c59459d089f6245096079fd724310c7a1f47217e9c0c4ca4ed35f5aa3b4e3c88614673e4520cac507d4bc1ebf01762b39d1a0c499847183f3cb1ed1e5983d2a112206a3e8f5048a628eec4de9391b8b12511b7d59cad0bb31046d57bfad645efc98dacea35e9d4e174e2fe435906ff7823b28b89c9e01815d4e1a0c6f244ce668df1f078ffae16c4a7e54b9d1fe3ce38e795f8e3000819d119115b7dce619946654faa91c6bcf317bb9c1f639fd461761d8cb26d277587deef5683ea4eaa08bdd542472a9f078584703505e4e7d484764243492521ea11df2f7c14e94a526a8617b72d3a76b5027ed7b5d87a641d751138bc330f93743ef962d0e3a0d7523b432de987c3aa12da03a4addd8e20ad95e205c79c104c9ccda0cce116769448bef04024b0424f7e1f09df802780275692b6980a5adb34ca33531bba0ba99dcaacd16dc0316124b4b5bd0b5f0fcdd9266be979a2c46bddbd98530c8b9e634fb10d6e122f6fce82d0bd15f217c4b08837a11831f16dd88d091dd5fa6ee52bb0419ae66ef3208993acf1ec1216ade19f5b21fb96758e7043845827965cde7356c883c449204ea753e616bd7d5b5ae0b91b4f434cedb621500f5a7c59c26b263109897a2ce958ed3d259b099fd2190a8935915caa73b445f6e05e8a0a960900faa58e2a4454c9e0a02969341e86b143c2ea07be81fb153b4b78f6e0d2c462b147d4338f7509e328977b85fa774e26df06b21e07813b243e4877f5730fa9eea752ab131d6b2fab83d0158552a7ab17a7a5314924c4164724f0cb523822a18a2907f4d8701ef91a1de651b03a6d91fb99210b492dd00b7483a41a406e1f26ba1386af5b317dd3724e62020d2f5aac62c3955c2b2db533ad0bdace75aa4be7c100ffc5bf025fa5d5bfe439599a21bb5ad64313f538017b3db8d1abeb2e9eff35076471fd341b01b31dc08c2a80155a3a72050e79a8d500f5ea555f9a270452d755b7ff0a18d0f8d8ec0b24f1ce5f5705c42c3182ad2cb77321ce563b6feb3f990c4e579c1e4e9aecb3f30da4066f553428e4c8de75c03d37cae9bafa83457a037fa55b316c0e2c8ddbf83f90b27cf2270185a84b501b27760b9e1f5a7551fa3975890e6ff34ac965c446cdfc65a8148dd57bd6225660b555cd6ee2f4b5cebc9461f910b760dbf151bedaf3492aedfb1bef467c05112d5108ad91254b130a5031d3eb5d4e771657ce1f967f1de51cfdb5dbc11c9260f819e3bfeb2fa2da117023f70b534c6c516675fd8af9d7552b7368e956927b580cb981098a188d74552c64f7a0efe462f932dd626c8669f68eaecd0f2dd05a76d7e06d90db59df370bb3bd8a23137c8cd844cf78bb13758d3ec903608c58173c093ed165f528faeb3c4483b606c617f1a14c4107cdc0424d869821386770523393dc0a2f384b343a624dc98af0678d27960ee58bb0ff7878dfa05abd9af59f7d59c44edeeb53bce974e718590b0e23773a7415b4303a28f9476b04c2ab1b6b1967fe0e5ca4a45706fcb114877b0a0166aa2995f6f6d716133b8000574c00ce395cf02d9c36d1d31bee50ac62c47a0c7a1a117aa029171fc262312f38850965cfb33b9516968bf22c8e0aa40786d539fd90a49db4d471824a862817c82854771083998a66c8dd32faf6b69c70dd2e02995127d6675b3a52fa0651c68602ea1db46d6db6817cadf5891d48c253bf8902d8494a2fcf93e88839e46e7653e64f4032bf8550a94631bdc07400c902254c5a76e1dffeb59e4ec31ba7961bc6cafbff196cde0512b2b9eee14dbc9f86aa64a56e3447facbbc63cc49949dc0ce996a0f62278bf83aea4b267ccab6f512bca50e707531b15902dd211b407aac448a8ebb4f2fae95e30a6caa1339e1775319473abab453b2026949abc65b31daf850597fc1a4e2f37fb1f15b5c8d3fffa6b37d6cdd65eacc26dcc683500d1651320b0fca28a2911c18bf838c71bd9ba6b946f4fdaf981800dbe492f19b401be020dea82b99b2e5710b97c92650071b8a10d8dfb55302d4576559110720f611a6e3ede34030eb5ad5688ca64e5c4a3724b1e45162340c3c8c4c0099921186d223846f51e9fbf12d091aff36c39aaa076582a632bb91983482daa31e86e933dde91f94a0a5672f62e988ce2bc318480c8ebcb6ae5df84b494172991cb07c901bcccd5605db7c4fa1d8d5249b9ad8fc5227e3e116f6e7a7f704b44e5fd86546ce16826ad3e118ae4797a681fcc95e60c431b20ba17f5c9c71b563a34dba30ac5a19dfc36c7ace96be83ea4d9d830e1424bccb60dd8016d0896da47e29693bfce8fc9a9b52fac6a2b3c8b77998b0f738266f5d412e87059cb8454d53e87cd4dcc25d51d5b20e64ada774a4803b98ee4d54a35b2bdf0fd5c348dc67e3addc62d00772d711a719124430708e362d2df670a2746a5df95d5a4165fafe7fac68b08d7a6fa9bb4921156fa15222d8f3c5211c2bdaaa59a94e7a9f8fe2de8b818049c3c1d08dd71e433f2a229b4bb7d6197c9fcf4dc64e973af68e06ca44c22025ca690e93"}], 0x1100, 0x8000}, 0x81)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2801000010000507000000000000000000000001", @ANYRES32=r5, @ANYBLOB="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"], 0x128}}, 0x48080)

01:06:58 executing program 4:
r0 = getpid()
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x352}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r2 = fanotify_init(0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fanotify_mark(r2, 0x51, 0x2, r3, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1ff}, 0x9c)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r5, 0x0, 0x90)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x40408c1)
getpid()
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300030000000800000400000000e9ca"], 0x1}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a30e2116844013b11adb21dc4314ed8af2516d4d4088d90151eec3f5bf0579e590cf35826a852d3a7793b727797ba5fb96b66eacb12bcb92a47ab8c6a9be6176a0df7d72c00fef3671ebfb551ab67f2a8700f9d3a8957a384b022fddf4d3f5e806c627b57564c8e0ada0000000000000000000000000000002c311f47131801d4a854b8199e66d54fe3800d2d45667da9e5c91c6cdea29e6b72804fd0c131aec1423c00422a68c74072bf0c8cdb5107ff233191e74265ceae772e07a53e1ae8da2382d15918ef38fbe7474b7a6ff0c8f85ada095228ab7267d257c0a0abed39318f7a55115ae5291ec2c9901244f1e59ffc5ed258084953e8ba090aa027eeb8e403023fe433f875584bb980f6b89e07de6b6916ea8d4b224429d260b2873c434c289a88f2576efaef305ece15188ab16038958038d2686d8a111d738a908aec5ff6dd889dfeb6c0e559e5eda99fac54e1dcc222b946e45ff3696064a94c7ae6218fafaea80e0ef0dcc2dc0b402452b136b58fb3e6e90fd8abe722425310afae4f83a7a2b5d115862f9fb90c5feaac7ba50707511cd6ebbcfabfb9ec57fbc9d1cc84a4de309497530f10ecacccf9f99a19010374035ee477896d37174c78ea49df15bdcc9bd390dbc4d04270b00ebda39dec96171052cb8912c1fc7f4cac9c76ae0db08cad36737ff7853f535ebedc929832e8d74eadb9d0bebfeb237860115f9643534310a29d6c206e42be06ebf29752ffad86f9b4aa1e05ccf478ec93a5deaa4b92b77a4d10eb92e0d9493a8c979eaad640c9250e2ab4"], 0x23a)
getsockname$netlink(r7, &(0x7f0000000000), &(0x7f0000000140)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)

01:06:58 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:06:58 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:06:58 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1476.118689][T29778] tipc: TX() has been purged, node left!
01:07:00 executing program 2:

01:07:00 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:00 executing program 1:
r0 = getpid()
r1 = getpid()
kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

01:07:00 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:00 executing program 4:

01:07:00 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000", 0x20)

01:07:00 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:00 executing program 1:

01:07:00 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:00 executing program 4:

[ 1477.358633][    C1] net_ratelimit: 16 callbacks suppressed
[ 1477.358643][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1477.370162][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1477.375937][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1477.381713][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:00 executing program 2:

01:07:00 executing program 1:

01:07:00 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:00 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:00 executing program 4:

01:07:01 executing program 2:

01:07:01 executing program 1:

01:07:01 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000", 0x20)

01:07:01 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:01 executing program 4:

01:07:01 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:01 executing program 1:

[ 1477.998647][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1478.004442][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:01 executing program 2:

[ 1478.078664][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1478.084463][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:01 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:01 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:01 executing program 4:

01:07:01 executing program 1:

01:07:01 executing program 2:

01:07:01 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1478.718631][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1478.724545][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:02 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e78740005000000000000", 0x22)

01:07:02 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:02 executing program 4:

01:07:02 executing program 1:

01:07:02 executing program 2:

01:07:02 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:02 executing program 4:

01:07:02 executing program 1:

01:07:02 executing program 2:

01:07:02 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:02 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:02 executing program 1:

01:07:03 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e78740005000000000000", 0x22)

01:07:03 executing program 4:

01:07:03 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:03 executing program 2:

01:07:03 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e)

01:07:03 executing program 1:

01:07:03 executing program 4:

01:07:03 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:03 executing program 1:

01:07:03 executing program 2:

01:07:03 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)

01:07:03 executing program 4:

01:07:04 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e78740005000000000000", 0x22)

01:07:04 executing program 1:

01:07:04 executing program 2:

01:07:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:04 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)

01:07:04 executing program 4:

01:07:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:04 executing program 2:

01:07:04 executing program 4:

01:07:04 executing program 1:

01:07:04 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)

01:07:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:05 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000000000", 0x23)

01:07:05 executing program 1:

01:07:05 executing program 4:

01:07:05 executing program 2:

01:07:05 executing program 5:

01:07:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:05 executing program 2:

01:07:05 executing program 4:

01:07:05 executing program 1:

01:07:05 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x4, 0x4, 0xf3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c)

01:07:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1482.878699][    C0] net_ratelimit: 18 callbacks suppressed
[ 1482.878715][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1482.890384][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:06 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000000000", 0x23)

01:07:06 executing program 2:

01:07:06 executing program 4:

01:07:06 executing program 1:

01:07:06 executing program 5:

01:07:06 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:06 executing program 4:

01:07:06 executing program 2:

01:07:06 executing program 1:

01:07:06 executing program 5:

01:07:06 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:06 executing program 2:

[ 1483.598630][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1483.605009][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1483.610805][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1483.616664][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:07 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r1)
close(r2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000001700)=0x9)
close(r1)
write(r0, &(0x7f0000000300)="2400000012005f3414f9f407000973ca2db90fb88e67003e7874000500000000000000", 0x23)

01:07:07 executing program 4:

01:07:07 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:07 executing program 1:

01:07:07 executing program 5:

01:07:07 executing program 2:

01:07:07 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:07 executing program 4:

01:07:07 executing program 1:

01:07:07 executing program 5:

01:07:07 executing program 2:

[ 1484.238632][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1484.244572][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1484.318665][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1484.324605][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:07 executing program 4:

01:07:08 executing program 2:

01:07:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:08 executing program 5:

01:07:08 executing program 1:

01:07:08 executing program 4:

01:07:08 executing program 0:

01:07:08 executing program 2:

01:07:08 executing program 5:

01:07:08 executing program 4:

01:07:08 executing program 1:

01:07:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:08 executing program 0:

01:07:08 executing program 5:

01:07:08 executing program 4:

01:07:08 executing program 2:

01:07:08 executing program 1:

01:07:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:08 executing program 0:

01:07:08 executing program 5:

01:07:08 executing program 1:

01:07:08 executing program 4:

01:07:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:08 executing program 2:

01:07:09 executing program 0:

01:07:09 executing program 4:

01:07:09 executing program 1:

01:07:09 executing program 5:

01:07:09 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:09 executing program 2:

01:07:09 executing program 1:

01:07:09 executing program 0:

01:07:09 executing program 5:

01:07:09 executing program 4:

01:07:09 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:09 executing program 2:

01:07:09 executing program 1:

01:07:09 executing program 4:

01:07:09 executing program 5:

01:07:09 executing program 0:

01:07:09 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:09 executing program 2:

01:07:09 executing program 1:

01:07:09 executing program 4:

01:07:09 executing program 5:

01:07:09 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:10 executing program 0:

01:07:10 executing program 2:

01:07:10 executing program 1:

01:07:10 executing program 4:

01:07:10 executing program 5:

01:07:10 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:10 executing program 0:

01:07:10 executing program 2:

01:07:10 executing program 1:

01:07:10 executing program 4:

01:07:10 executing program 5:

01:07:10 executing program 0:

01:07:10 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:10 executing program 2:

01:07:10 executing program 1:

01:07:10 executing program 4:

01:07:10 executing program 5:

01:07:10 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:10 executing program 0:

01:07:10 executing program 2:

01:07:10 executing program 1:

01:07:10 executing program 4:

01:07:11 executing program 5:

01:07:11 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:11 executing program 2:

01:07:11 executing program 1:

01:07:11 executing program 4:

01:07:11 executing program 0:

01:07:11 executing program 5:

01:07:11 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:11 executing program 1:

01:07:11 executing program 2:

01:07:11 executing program 4:

01:07:11 executing program 5:

01:07:11 executing program 0:

[ 1488.398650][    C0] net_ratelimit: 16 callbacks suppressed
[ 1488.398660][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1488.410298][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:11 executing program 2:

01:07:11 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1488.478699][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1488.484604][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:11 executing program 4:

01:07:11 executing program 1:

01:07:11 executing program 5:

01:07:11 executing program 0:

01:07:11 executing program 2:

01:07:12 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:12 executing program 4:

01:07:12 executing program 5:

01:07:12 executing program 1:

01:07:12 executing program 0:

01:07:12 executing program 2:

01:07:12 executing program 4:

01:07:12 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1489.118637][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.124595][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:12 executing program 5:

01:07:12 executing program 1:

01:07:12 executing program 0:

01:07:12 executing program 2:

01:07:12 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:12 executing program 4:

01:07:12 executing program 5:

01:07:12 executing program 1:

01:07:12 executing program 2:

01:07:12 executing program 0:

01:07:12 executing program 4:

01:07:12 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:12 executing program 5:

01:07:13 executing program 1:

01:07:13 executing program 2:

[ 1489.838627][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.844465][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1489.850814][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.856615][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:13 executing program 4:

01:07:13 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:13 executing program 1:

01:07:13 executing program 0:

01:07:13 executing program 5:

01:07:13 executing program 2:

01:07:13 executing program 4:

01:07:13 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:13 executing program 1:

01:07:13 executing program 0:

01:07:13 executing program 5:

01:07:13 executing program 1:

01:07:13 executing program 2:

01:07:13 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:13 executing program 4:

01:07:13 executing program 5:

01:07:13 executing program 0:

01:07:13 executing program 2:

01:07:14 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:14 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479ae6d68dba5d949bdce2613e9391fb4e8284f33c48c2ab9b125bc8fd963c1956097f213eb3bf3b8e0ec5de9ebf3b2b82b20c819ea15689caed5bed971a7cca1cb1412c6241a39f99a67cd1075c1e34b74458f527e30cdfed331217b6c777c38c0b62c186227f4d5b21a731759dd2cf690d9586c0724a478f3f19629e739ac2983e74f90b96624c841db9360cab86b73eb94808205182d41506316f881a39d9ebefa6603f5dfb72c82676a1c568be0268258cf6ec7b2c7896b855703530fe4f2d9420ea57db9d986fd8e69bc2097c1cf2187e0c0166a2077635554da5dcc5da328141d", 0x126}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

01:07:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fefff67a0af0fffaffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28)

01:07:14 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @xdp, @isdn={0x22, 0x87}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:14 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0)

01:07:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0)

01:07:14 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:14 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0)

01:07:14 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1491.341484][ T9822] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1491.372612][ T9822] CPU: 1 PID: 9822 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1491.381515][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
01:07:14 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:14 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uquota='uquota'}]})

[ 1491.391574][ T9822] Call Trace:
[ 1491.394941][ T9822]  dump_stack+0x11d/0x181
[ 1491.399375][ T9822]  dump_header+0xaa/0x39c
[ 1491.403723][ T9822]  oom_kill_process.cold+0x10/0x15
[ 1491.408872][ T9822]  out_of_memory+0x231/0xa60
[ 1491.413600][ T9822]  mem_cgroup_out_of_memory+0x128/0x150
[ 1491.419160][ T9822]  try_charge+0xb6c/0xbf0
[ 1491.423508][ T9822]  ? rcu_note_context_switch+0x720/0x760
[ 1491.429190][ T9822]  mem_cgroup_try_charge+0xd2/0x260
[ 1491.434405][ T9822]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1491.440110][ T9822]  wp_page_copy+0x322/0x1040
[ 1491.444728][ T9822]  ? __read_once_size+0x41/0xe0
[ 1491.449645][ T9822]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1491.455570][ T9822]  do_wp_page+0x192/0xeb0
[ 1491.459911][ T9822]  ? record_times+0x16/0x90
[ 1491.464455][ T9822]  __handle_mm_fault+0x1d16/0x2e00
[ 1491.469704][ T9822]  ? try_to_free_mem_cgroup_pages+0x258/0x4d0
[ 1491.475810][ T9822]  handle_mm_fault+0x21b/0x530
[ 1491.480767][ T9822]  __do_page_fault+0x456/0x8d0
[ 1491.485571][ T9822]  do_page_fault+0x38/0x194
[ 1491.490098][ T9822]  page_fault+0x34/0x40
[ 1491.494278][ T9822] RIP: 0033:0x40e4d0
[ 1491.498268][ T9822] Code: 50 80 60 20 01 48 89 48 10 48 8b 4c 24 60 48 89 48 18 8b 4c 24 68 89 48 24 8b 4c 24 28 89 48 28 31 c0 48 8b 8c 04 20 01 00 00 <48> 89 8c 02 50 bf 75 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f
[ 1491.517879][ T9822] RSP: 002b:00007fff2de49270 EFLAGS: 00010287
[ 1491.524082][ T9822] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000029
[ 1491.532113][ T9822] RDX: 00000000000000a8 RSI: 00007f621e5b7db0 RDI: 000000000075bfd0
01:07:14 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='quota'])

01:07:14 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1491.540110][ T9822] RBP: 000000000075bfd4 R08: 0000000000000000 R09: 00007f621e5b8700
[ 1491.548293][ T9822] R10: 00007f621e5b89d0 R11: 0000000000000202 R12: 000000000075bfc8
[ 1491.556273][ T9822] R13: 0000000000000005 R14: 0000000000000001 R15: 000000000075bfd4
[ 1491.646142][ T9844] XFS (loop4): Invalid superblock magic number
[ 1491.652731][ T9822] memory: usage 307200kB, limit 307200kB, failcnt 6128
[ 1491.666079][ T9822] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1491.673955][ T9822] Memory cgroup stats for /syz0:
[ 1491.674185][ T9822] anon 242487296
[ 1491.674185][ T9822] file 28672
[ 1491.674185][ T9822] kernel_stack 6930432
[ 1491.674185][ T9822] slab 9920512
[ 1491.674185][ T9822] sock 0
[ 1491.674185][ T9822] shmem 12288
[ 1491.674185][ T9822] file_mapped 0
[ 1491.674185][ T9822] file_dirty 0
[ 1491.674185][ T9822] file_writeback 0
[ 1491.674185][ T9822] anon_thp 205520896
[ 1491.674185][ T9822] inactive_anon 0
[ 1491.674185][ T9822] active_anon 242401280
[ 1491.674185][ T9822] inactive_file 135168
[ 1491.674185][ T9822] active_file 0
[ 1491.674185][ T9822] unevictable 0
[ 1491.674185][ T9822] slab_reclaimable 540672
[ 1491.674185][ T9822] slab_unreclaimable 9379840
[ 1491.674185][ T9822] pgfault 99759
[ 1491.674185][ T9822] pgmajfault 0
[ 1491.674185][ T9822] workingset_refault 99
[ 1491.674185][ T9822] workingset_activate 99
[ 1491.674185][ T9822] workingset_nodereclaim 0
[ 1491.674185][ T9822] pgrefill 1339
[ 1491.674185][ T9822] pgscan 1483
[ 1491.674185][ T9822] pgsteal 379
[ 1491.683026][ T9853] gfs2: not a GFS2 filesystem
[ 1491.770461][ T9822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9822,uid=0
[ 1491.790189][ T9822] Memory cgroup out of memory: Killed process 9822 (syz-executor.0) total-vm:72716kB, anon-rss:2168kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 1491.812442][  T609] oom_reaper: reaped process 9822 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB
01:07:17 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0)
poll(&(0x7f0000000080)=[{r2}, {r3}], 0x2, 0x0)

01:07:17 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x0)

01:07:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:17 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='quota'])

01:07:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)

01:07:17 executing program 2:
setxattr$trusted_overlay_opaque(0x0, &(0x7f00000007c0)='trusted.overlay.opaque\x00', &(0x7f0000000800)='y\x00', 0x2, 0x0)
socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x240)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'team0\x00'})

[ 1494.008626][    C1] net_ratelimit: 16 callbacks suppressed
[ 1494.008637][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1494.020090][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1494.025872][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1494.031786][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1494.130344][ T9891] gfs2: not a GFS2 filesystem
01:07:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:17 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)='\a', 0x2a}], 0x1}, 0x0)

01:07:17 executing program 5:
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x2001)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

01:07:17 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1494.531921][ T9910] kvm [9906]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.569250][ T9910] kvm [9906]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
01:07:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:17 executing program 4:
open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f0000000600)="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", 0x1f0)
sendfile(r1, r2, 0x0, 0x7fffffa7)

[ 1494.593488][ T9915] kvm [9914]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.602776][ T9915] kvm [9914]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.613096][ T9910] kvm [9906]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.616334][ T9915] kvm [9914]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
01:07:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000b80)="85134012ddb54aad37483b8ac3609fd4e24a86a391ec15f9b4e50bb781a621da28cb046be1072f6bdc71b3f260c45845ddcfbf0f340456f4c64b05fce9ac22ac325e003186e939ed4c56f14c87e748d7b16884071fd8d287ebea8dcf8f7af5dcb4a35be37bdc87eed8cbc1d1fad2ae0bf31c101bd3ab763aca8fcea55420cb1114a927b5b1db8051f3eca19a08e106c30f1cfde906185b9992b859699375965f538aec90a9438567b6b8d93a119f5195e9b22fba5fe1ec0ae57d83d015673f1b4aa206e9b00013c2eb2a98f4d6cdd1439b8e70090e4b1da216b64e3ebc990d32a056d72c21b827e678dd88a15657b449ad2e4511ce17d43f4ea93d686a37eb9118", 0x101}], 0x1)

[ 1494.638358][ T9910] kvm [9906]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.638646][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1494.653068][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1494.666960][ T9915] kvm [9914]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.696967][ T9910] kvm [9906]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1494.718659][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1494.724471][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1494.740726][   T27] audit: type=1800 audit(1580260037.947:177): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=159 res=0
[ 1494.771936][ T9929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 1494.781028][ T9929] FAT-fs (loop4): Filesystem has been set read-only
[ 1494.783130][ T9915] kvm [9914]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
01:07:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1494.788500][ T9929] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17)
01:07:18 executing program 4:
open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f0000000600)="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", 0x1f0)
sendfile(r1, r2, 0x0, 0x7fffffa7)

[ 1494.873527][   T27] audit: type=1804 audit(1580260037.947:178): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1257/file0/file0" dev="loop4" ino=159 res=1
[ 1495.081999][   T27] audit: type=1800 audit(1580260038.287:179): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=160 res=0
01:07:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1495.162639][ T9940] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 1495.170834][   T27] audit: type=1804 audit(1580260038.327:180): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1258/file0/file0" dev="loop4" ino=160 res=1
[ 1495.179960][ T9940] FAT-fs (loop4): Filesystem has been set read-only
[ 1495.204261][ T9940] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17)
01:07:18 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)

[ 1495.358651][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1495.364462][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:18 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:18 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x2, 0x20000004, &(0x7f0000b63fe4), 0x1c)

01:07:18 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='S'})

01:07:18 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06)

01:07:18 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:18 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000006c0), 0x4)
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x0, 0x300)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fallocate(r4, 0x1, 0x0, 0x28120001)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x400454d0, &(0x7f0000000040))
mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x3608841, &(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC, @ANYBLOB="2c7365636c6162656c2c726f6f74636f6e746578743d753b861870e1c84accc5ce6e636f4e66696e6564f8752c00"])
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
open(0x0, 0x363540, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
fallocate(r6, 0x1, 0x1008, 0x28120001)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x28120001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010005fba0002", @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC, @ANYRES32], 0x5}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000001940)='lo\x00')
syz_open_procfs(0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00')

01:07:19 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06)

01:07:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:19 executing program 0:
open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/116, 0x74)

01:07:19 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1496.437414][T10002] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1496.474240][T10002] CPU: 0 PID: 10002 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1496.483092][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1496.493387][T10002] Call Trace:
[ 1496.496712][T10002]  dump_stack+0x11d/0x181
[ 1496.501073][T10002]  dump_header+0xaa/0x39c
[ 1496.505489][T10002]  oom_kill_process.cold+0x10/0x15
[ 1496.510664][T10002]  out_of_memory+0x231/0xa60
[ 1496.515278][T10002]  ? __rcu_read_unlock+0x66/0x3d0
[ 1496.520456][T10002]  mem_cgroup_out_of_memory+0x128/0x150
[ 1496.526103][T10002]  try_charge+0xb6c/0xbf0
[ 1496.530460][T10002]  ? rcu_note_context_switch+0x720/0x760
[ 1496.536268][T10002]  mem_cgroup_try_charge+0xd2/0x260
[ 1496.541504][T10002]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1496.547202][T10002]  shmem_getpage_gfp+0x3bf/0x1390
[ 1496.552280][T10002]  shmem_write_begin+0x9f/0x140
[ 1496.557176][T10002]  generic_perform_write+0x136/0x320
[ 1496.562530][T10002]  __generic_file_write_iter+0x251/0x380
[ 1496.568177][T10002]  ? generic_write_check_limits.isra.0+0x168/0x1c0
[ 1496.574709][T10002]  generic_file_write_iter+0x28c/0x38c
[ 1496.580264][T10002]  new_sync_write+0x388/0x4a0
[ 1496.584974][T10002]  __vfs_write+0xb1/0xc0
[ 1496.589267][T10002]  vfs_write+0x18a/0x390
[ 1496.593550][T10002]  ksys_pwrite64+0xee/0x120
[ 1496.598190][T10002]  __x64_sys_pwrite64+0x5e/0x80
[ 1496.603214][T10002]  do_syscall_64+0xcc/0x3a0
[ 1496.607792][T10002]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1496.613759][T10002] RIP: 0033:0x415147
[ 1496.617680][T10002] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01
01:07:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1496.637434][T10002] RSP: 002b:00007f621e5d8a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1496.645968][T10002] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 0000000000415147
[ 1496.654058][T10002] RDX: 000000000000ffdf RSI: 0000000020000100 RDI: 0000000000000003
[ 1496.662077][T10002] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000
[ 1496.670092][T10002] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff
[ 1496.678197][T10002] R13: 0000000000000bad R14: 00000000004cc850 R15: 000000000075bf2c
[ 1496.689678][T10002] memory: usage 307200kB, limit 307200kB, failcnt 6185
[ 1496.697391][T10002] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1496.704683][T10002] Memory cgroup stats for /syz0:
[ 1496.704862][T10002] anon 242393088
[ 1496.704862][T10002] file 28672
[ 1496.704862][T10002] kernel_stack 6930432
[ 1496.704862][T10002] slab 9920512
[ 1496.704862][T10002] sock 0
[ 1496.704862][T10002] shmem 12288
[ 1496.704862][T10002] file_mapped 0
[ 1496.704862][T10002] file_dirty 0
[ 1496.704862][T10002] file_writeback 0
[ 1496.704862][T10002] anon_thp 205520896
[ 1496.704862][T10002] inactive_anon 0
[ 1496.704862][T10002] active_anon 242311168
[ 1496.704862][T10002] inactive_file 135168
[ 1496.704862][T10002] active_file 0
[ 1496.704862][T10002] unevictable 0
[ 1496.704862][T10002] slab_reclaimable 540672
[ 1496.704862][T10002] slab_unreclaimable 9379840
[ 1496.704862][T10002] pgfault 100221
[ 1496.704862][T10002] pgmajfault 0
[ 1496.704862][T10002] workingset_refault 99
[ 1496.704862][T10002] workingset_activate 99
[ 1496.704862][T10002] workingset_nodereclaim 0
01:07:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[ 1496.704862][T10002] pgrefill 1339
[ 1496.704862][T10002] pgscan 1483
[ 1496.704862][T10002] pgsteal 379
[ 1496.815777][T10002] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9999,uid=0
[ 1496.834360][T10002] Memory cgroup out of memory: Killed process 9999 (syz-executor.0) total-vm:72716kB, anon-rss:2168kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 1496.856589][  T609] oom_reaper: reaped process 9999 (syz-executor.0), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
01:07:20 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x2}})

01:07:20 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:20 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1000000", 0xc8}], 0x4, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

01:07:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x3, 0x300)
accept4(r1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r4 = socket$packet(0x11, 0x0, 0x300)
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0xf7, 0x6, @dev={[], 0x21}}, 0x14)
open(0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r7, &(0x7f0000000580), 0xefee)
write$FUSE_CREATE_OPEN(r7, &(0x7f0000000380)={0xc1, 0x0, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x400e0a5}}}}, 0xa0)
r8 = fcntl$dupfd(r1, 0x0, r7)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="287925622d2a431d8bbbc90102ffffffffff0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x40000)
r9 = fcntl$dupfd(r6, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00')

01:07:20 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:20 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x2}})

01:07:20 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:07:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x1c, 0x40}]}, 0x38}}, 0x0)

[ 1497.252174][T10035] ptrace attach of "/root/syz-executor.4"[10032] was attempted by "/root/syz-executor.4"[10035]
[ 1497.327588][T10021] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1497.338094][T10021] CPU: 0 PID: 10021 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1497.346777][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1497.356858][T10021] Call Trace:
[ 1497.360167][T10021]  dump_stack+0x11d/0x181
[ 1497.364658][T10021]  dump_header+0xaa/0x39c
[ 1497.369008][T10021]  oom_kill_process.cold+0x10/0x15
[ 1497.374151][T10021]  out_of_memory+0x231/0xa60
[ 1497.378853][T10021]  mem_cgroup_out_of_memory+0x128/0x150
[ 1497.384484][T10021]  try_charge+0xb6c/0xbf0
[ 1497.388844][T10021]  ? rcu_note_context_switch+0x720/0x760
[ 1497.394585][T10021]  mem_cgroup_try_charge+0xd2/0x260
[ 1497.399937][T10021]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1497.405585][T10021]  __handle_mm_fault+0x197f/0x2e00
[ 1497.410752][T10021]  handle_mm_fault+0x21b/0x530
[ 1497.415561][T10021]  __do_page_fault+0x456/0x8d0
[ 1497.420340][T10021]  do_page_fault+0x38/0x194
[ 1497.425309][T10021]  page_fault+0x34/0x40
[ 1497.429466][T10021] RIP: 0033:0x412b3f
[ 1497.433413][T10021] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41
[ 1497.453343][T10021] RSP: 002b:00007fff2de49180 EFLAGS: 00010206
[ 1497.459425][T10021] RAX: 00007f621e577000 RBX: 0000000000020000 RCX: 000000000045b39a
[ 1497.467615][T10021] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000
01:07:20 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:20 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

[ 1497.475596][T10021] RBP: 00007fff2de49260 R08: ffffffffffffffff R09: 0000000000000000
[ 1497.483750][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2de49350
[ 1497.491729][T10021] R13: 00007f621e597700 R14: 0000000000000002 R15: 000000000075c07c
[ 1497.500019][T10021] memory: usage 307200kB, limit 307200kB, failcnt 6233
[ 1497.506875][T10021] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1497.513972][T10021] Memory cgroup stats for /syz0:
[ 1497.514230][T10021] anon 242393088
[ 1497.514230][T10021] file 28672
[ 1497.514230][T10021] kernel_stack 6930432
[ 1497.514230][T10021] slab 9920512
[ 1497.514230][T10021] sock 0
[ 1497.514230][T10021] shmem 12288
[ 1497.514230][T10021] file_mapped 0
[ 1497.514230][T10021] file_dirty 0
[ 1497.514230][T10021] file_writeback 0
[ 1497.514230][T10021] anon_thp 205520896
[ 1497.514230][T10021] inactive_anon 0
[ 1497.514230][T10021] active_anon 242311168
[ 1497.514230][T10021] inactive_file 135168
[ 1497.514230][T10021] active_file 0
[ 1497.514230][T10021] unevictable 0
[ 1497.514230][T10021] slab_reclaimable 540672
[ 1497.514230][T10021] slab_unreclaimable 9379840
[ 1497.514230][T10021] pgfault 100287
[ 1497.514230][T10021] pgmajfault 0
[ 1497.514230][T10021] workingset_refault 99
[ 1497.514230][T10021] workingset_activate 99
[ 1497.514230][T10021] workingset_nodereclaim 0
[ 1497.514230][T10021] pgrefill 1339
[ 1497.514230][T10021] pgscan 1483
[ 1497.514230][T10021] pgsteal 379
[ 1497.608537][T10021] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10021,uid=0
01:07:20 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0})

01:07:20 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1497.624141][T10021] Memory cgroup out of memory: Killed process 10021 (syz-executor.0) total-vm:72848kB, anon-rss:2168kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
01:07:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

01:07:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
getdents64(r0, &(0x7f0000000000)=""/58, 0x3a)
getdents64(r0, &(0x7f0000000200)=""/528, 0x210)

01:07:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x1c, 0x40}]}, 0x38}}, 0x0)

01:07:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

01:07:21 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:21 executing program 4:
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r0, &(0x7f00000001c0)='T', 0x1, 0x0)
socket(0x0, 0xa, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)

01:07:21 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:21 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53e", 0xd5}], 0x4, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

01:07:21 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0), 0x0, 0x0, 0x0)

01:07:21 executing program 0:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0)

[ 1498.279711][T10090] ptrace attach of "/root/syz-executor.0"[10087] was attempted by "/root/syz-executor.0"[10090]
01:07:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0), 0x0, 0x0, 0x0)

01:07:21 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

[ 1498.446550][T10097] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 1498.497621][T10097] CPU: 0 PID: 10097 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1498.506363][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1498.516566][T10097] Call Trace:
[ 1498.519974][T10097]  dump_stack+0x11d/0x181
[ 1498.524339][T10097]  dump_header+0xaa/0x39c
[ 1498.528691][T10097]  oom_kill_process.cold+0x10/0x15
[ 1498.533819][T10097]  out_of_memory+0x231/0xa60
[ 1498.538438][T10097]  mem_cgroup_out_of_memory+0x128/0x150
[ 1498.544002][T10097]  try_charge+0xb6c/0xbf0
[ 1498.548573][T10097]  ? rcu_note_context_switch+0x720/0x760
[ 1498.555377][T10097]  mem_cgroup_try_charge+0xd2/0x260
[ 1498.560627][T10097]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1498.568242][T10097]  wp_page_copy+0x322/0x1040
[ 1498.573225][T10097]  ? __read_once_size+0x41/0xe0
[ 1498.578143][T10097]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1498.584213][T10097]  do_wp_page+0x192/0xeb0
[ 1498.588573][T10097]  __handle_mm_fault+0x1d16/0x2e00
01:07:21 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:21 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

[ 1498.593859][T10097]  handle_mm_fault+0x21b/0x530
[ 1498.598645][T10097]  __do_page_fault+0x456/0x8d0
[ 1498.603671][T10097]  do_page_fault+0x38/0x194
[ 1498.608193][T10097]  page_fault+0x34/0x40
[ 1498.612360][T10097] RIP: 0033:0x4734ee
[ 1498.616329][T10097] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87
[ 1498.638120][T10097] RSP: 002b:00007fff2de48c70 EFLAGS: 00010202
[ 1498.644580][T10097] RAX: 0000000000000006 RBX: 00007fff2de491d0 RCX: 0000000000000000
[ 1498.652782][T10097] RDX: 00007fff2de49348 RSI: 00000000004c0dc0 RDI: 00007fff2de491d0
[ 1498.660768][T10097] RBP: 00007fff2de491c0 R08: 0000000000000000 R09: 00007fff2de49348
[ 1498.668746][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2de494a0
[ 1498.676951][T10097] R13: 00000000004c0dc0 R14: 00007fff2de49348 R15: 0000000000000001
01:07:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0), 0x0, 0x0, 0x0)

[ 1498.700530][T10097] memory: usage 307200kB, limit 307200kB, failcnt 6268
[ 1498.707967][T10097] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1498.715420][T10097] Memory cgroup stats for /syz0:
[ 1498.715701][T10097] anon 242450432
[ 1498.715701][T10097] file 28672
[ 1498.715701][T10097] kernel_stack 6930432
[ 1498.715701][T10097] slab 9773056
[ 1498.715701][T10097] sock 0
[ 1498.715701][T10097] shmem 12288
[ 1498.715701][T10097] file_mapped 0
[ 1498.715701][T10097] file_dirty 0
[ 1498.715701][T10097] file_writeback 0
[ 1498.715701][T10097] anon_thp 205520896
[ 1498.715701][T10097] inactive_anon 0
[ 1498.715701][T10097] active_anon 242368512
[ 1498.715701][T10097] inactive_file 135168
[ 1498.715701][T10097] active_file 0
[ 1498.715701][T10097] unevictable 0
[ 1498.715701][T10097] slab_reclaimable 540672
[ 1498.715701][T10097] slab_unreclaimable 9232384
[ 1498.715701][T10097] pgfault 100485
[ 1498.715701][T10097] pgmajfault 0
[ 1498.715701][T10097] workingset_refault 99
[ 1498.715701][T10097] workingset_activate 99
[ 1498.715701][T10097] workingset_nodereclaim 0
[ 1498.715701][T10097] pgrefill 1339
[ 1498.715701][T10097] pgscan 1483
[ 1498.715701][T10097] pgsteal 379
[ 1498.883529][T10097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10090,uid=0
[ 1498.906421][T10097] Memory cgroup out of memory: Killed process 10090 (syz-executor.0) total-vm:72584kB, anon-rss:2212kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 1498.933176][  T609] oom_reaper: reaped process 10090 (syz-executor.0), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
01:07:22 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1499.160587][T10108] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1499.263464][T10114] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1499.518649][    C0] net_ratelimit: 17 callbacks suppressed
[ 1499.518659][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1499.530268][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:22 executing program 4:

01:07:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:07:22 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:22 executing program 0:

01:07:22 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:23 executing program 0:

01:07:23 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:07:23 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:07:23 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1500.040337][T10140] usb usb2: usbfs: process 10140 (syz-executor.4) did not claim interface 0 before use
[ 1500.238625][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1500.244577][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1500.250492][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1500.256231][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:24 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:07:24 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:07:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
pwrite64(r1, &(0x7f0000000000)="c2", 0x1, 0x1960)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
sendfile(r2, r2, 0x0, 0x8080fffffffe)
write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

01:07:24 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:24 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)

01:07:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)}}], 0x1, 0x0, 0x0)

01:07:24 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

[ 1500.958627][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1500.958647][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1500.964417][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1500.975945][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1500.993545][T10167] attempt to access beyond end of device
01:07:24 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1501.021819][T10167] loop4: rw=2049, want=130, limit=112
01:07:24 executing program 4:

[ 1501.268984][  T318] device 0 left promiscuous mode
01:07:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)}}], 0x1, 0x0, 0x0)

[ 1501.518711][  T318] tipc: TX() has been purged, node left!
01:07:24 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:24 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)

01:07:24 executing program 4:

01:07:25 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:07:25 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)}}], 0x1, 0x0, 0x0)

01:07:25 executing program 4:

01:07:25 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1502.161724][  T318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1502.206324][  T318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1502.294201][  T318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
01:07:25 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

[ 1502.338765][  T318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1502.432233][  T318] device bridge_slave_1 left promiscuous mode
[ 1502.438504][  T318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1502.541464][  T318] device bridge_slave_0 left promiscuous mode
[ 1502.570045][  T318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1502.692138][  T318] device veth1_macvtap left promiscuous mode
[ 1502.708040][  T318] device veth0_macvtap left promiscuous mode
[ 1502.736441][  T318] device veth1_vlan left promiscuous mode
[ 1502.767828][  T318] device veth0_vlan left promiscuous mode
[ 1503.449418][  T318] bond2 (unregistering): (slave bridge3): Releasing active interface
[ 1503.630022][  T318] bond0 (unregistering): (slave bond2): Releasing backup interface
[ 1503.658735][  T318] device bond2 left promiscuous mode
[ 1503.665380][  T318] bond2 (unregistering): Released all slaves
[ 1503.711854][  T318] bond1 (unregistering): (slave bridge2): Releasing active interface
[ 1503.880010][  T318] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1504.010147][  T318] bond0 (unregistering): (slave bond1): Releasing backup interface
[ 1504.048806][  T318] device bond1 left promiscuous mode
[ 1504.055643][  T318] bond1 (unregistering): Released all slaves
[ 1504.239081][  T318] device hsr_slave_0 left promiscuous mode
[ 1504.278787][  T318] device hsr_slave_1 left promiscuous mode
[ 1504.334386][  T318] device team_slave_1 left promiscuous mode
[ 1504.369271][  T318] team0 (unregistering): Port device team_slave_1 removed
[ 1504.393319][  T318] device team_slave_0 left promiscuous mode
[ 1504.419475][  T318] team0 (unregistering): Port device team_slave_0 removed
[ 1504.458736][  T318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1504.498850][  T318] device bond_slave_1 left promiscuous mode
[ 1504.518685][  T318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1504.569123][  T318] device bond_slave_0 left promiscuous mode
[ 1504.634651][  T318] bond0 (unregistering): Released all slaves
[ 1505.118630][    C0] net_ratelimit: 14 callbacks suppressed
[ 1505.118639][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1505.130076][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1505.393906][T10236] IPVS: ftp: loaded support on port[0] = 21
[ 1505.568339][T10236] chnl_net:caif_netlink_parms(): no params data found
[ 1505.624228][T10236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1505.631832][T10236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1505.640245][T10236] device bridge_slave_0 entered promiscuous mode
[ 1505.647946][T10236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1505.655533][T10236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1505.663677][T10236] device bridge_slave_1 entered promiscuous mode
[ 1505.682970][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1505.694199][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1505.716425][T10236] team0: Port device team_slave_0 added
[ 1505.723416][T10236] team0: Port device team_slave_1 added
[ 1505.739860][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1505.746855][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1505.772933][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1505.772963][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1505.808616][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1505.854336][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1505.868658][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1505.958916][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1506.081143][T10236] device hsr_slave_0 entered promiscuous mode
[ 1506.138997][T10236] device hsr_slave_1 entered promiscuous mode
[ 1506.178643][T10236] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1506.382414][T10236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1506.414577][T28067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1506.429223][T28067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1506.439397][T10236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1506.469990][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1506.478639][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1506.484414][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1506.489002][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1506.490207][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1506.498593][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1506.503837][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1506.510927][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1506.619534][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1506.627674][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1506.669196][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1506.677578][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1506.684743][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1506.723151][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1506.749687][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1506.769534][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1506.789385][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1506.815981][T10236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1506.840547][T10236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1506.873355][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1506.884247][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1506.910515][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1506.930816][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1506.950706][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1506.998520][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1507.008542][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1507.030428][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1507.039670][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1507.058635][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1507.064429][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1507.234561][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1507.243784][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1507.275992][T10236] device veth0_vlan entered promiscuous mode
[ 1507.284195][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1507.295884][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1507.323160][T10236] device veth1_vlan entered promiscuous mode
[ 1507.339407][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1507.347506][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1507.373067][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1507.400677][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1507.419422][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1507.440439][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1507.460908][T10236] device veth0_macvtap entered promiscuous mode
[ 1507.481136][T10236] device veth1_macvtap entered promiscuous mode
[ 1507.513757][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1507.538776][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.558710][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1507.592167][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.611952][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1507.638679][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.658702][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1507.691411][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.712366][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1507.733405][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1507.759415][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1507.792520][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1507.812284][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1507.840850][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1507.858998][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.891766][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1507.911526][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.938691][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1507.958660][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.998677][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1508.038713][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1508.073068][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1508.095306][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1508.112507][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
01:07:31 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:31 executing program 4:

01:07:31 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:31 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

01:07:31 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)

01:07:31 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:07:31 executing program 4:

01:07:31 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

01:07:31 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:32 executing program 4:

01:07:32 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:32 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
msgsnd(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)

01:07:32 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:32 executing program 5:
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:32 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000040), 0x4)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
gettid()
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r1, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0xd, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/13}, &(0x7f0000000180)=0x50)

01:07:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_aout(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x161)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
read(r0, &(0x7f0000000200)=""/231, 0x1000006ce)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
r2 = dup2(r1, r0)
ioctl$TCXONC(r2, 0x540a, 0x3)
r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r5 = dup(r4)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x302a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4)
ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000240)={0x2, {0x401, 0x0, 0x0, 0x80000000}, {0x0, 0x2, 0x5}, {0xdc6, 0x10000}})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000280)={0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}})
recvmsg(r4, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000012c0)={0x53, 0xfffffffffffffffc, 0x6, 0x2, @scatter={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)="8fb9ebd5fb26", &(0x7f0000000280)=""/4096, 0x4, 0x0, 0x0, &(0x7f0000001280)})
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)

01:07:32 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:32 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:07:32 executing program 5:
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:32 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:07:33 executing program 5:
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
ptrace$getsig(0x4202, r0, 0x0, &(0x7f00000000c0))

01:07:33 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000040), 0x4)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
gettid()
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r1, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0xd, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/13}, &(0x7f0000000180)=0x50)

01:07:33 executing program 5:
mkdir(0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:33 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

01:07:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0xa, r0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)='\x00')

01:07:33 executing program 5:
mkdir(0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:33 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:33 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)=0x10100)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:07:33 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:07:33 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1510.648627][    C1] net_ratelimit: 20 callbacks suppressed
[ 1510.648637][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1510.660094][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1510.665969][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1510.671880][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:33 executing program 5:
mkdir(0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x200e2000}})

01:07:34 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:34 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:34 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)=0x10100)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:07:34 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:34 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:34 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

[ 1511.358683][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1511.364488][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:34 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:34 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)

[ 1511.518642][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1511.524444][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:35 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:35 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

01:07:35 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000040)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d80)="d4f8a0bb8f373303f5f981f0eea6f0b1e1db28f23b96ced666adcdfea5cb7a304307593bb5ba0b4b791a8f8b0cf488e7aa4f51362867ee53f23f157ab29354910fb3791f220fcbd88def8ef425058cec11e0081a319e40fce011d5b984b5d108af5c19531daa29a8d21de236283f0c971f3757a34a4f408b64df09dbad1c0357ae18a2f04d4b03768aa55ac81779ebd864db3c3bb50915b3d878b2cab59b86d48047caaafdad389633ec30e07e958f0cc9ba908429d5e7bd3e262fb4ee6a9c", 0xbf}, {0x0}, {&(0x7f0000000f40)="46db8820f0473a81fa5b9c328ae5ea922a09654c51521e041fc47bfdb1bdb6f8a25305858bd5a05095fef60572620512ded9d11c64668dba936cf0c11a88e11abea537dff8c2a8d15126811fafdcde4a8d", 0x51}, {&(0x7f0000000fc0)="376615ae64f05e8e99efc443e59335eb1e548b5304ddbb530ba007fbab858b3ff0e92634456e28ca1ab1e15c06438c11353f6b01443b50b957d2efb3b52835b0f98aa7c9d715e7659b2f443be898d10ad188bf34359d35aacc7891ba716a09512af7ad46", 0x64}, {0x0}, {&(0x7f0000002f80), 0x100000}], 0x6}}], 0x2, 0x400f1f4)

01:07:35 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:35 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)

[ 1511.998650][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1512.004487][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:35 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

01:07:35 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

01:07:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')

01:07:35 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:35 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:36 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

01:07:36 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:36 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1}, 0x0)

01:07:36 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6008}, 0x200000})

01:07:36 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

01:07:36 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:36 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
poll(&(0x7f0000000400)=[{r1}], 0x1, 0x200)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b)
ioctl$TIOCSETD(r1, 0x5423, 0x0)

01:07:36 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:36 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:36 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:36 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x5}, 0x14}}, 0x0)

01:07:37 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:37 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:37 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

01:07:37 executing program 3:
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x40)
close(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$inet6(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xdaa3b002485c5b6d}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x10008800)
bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:07:37 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:37 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:37 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:37 executing program 4:
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}})

01:07:37 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:37 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:37 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
write(0xffffffffffffffff, 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000004000c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:07:38 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:38 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

[ 1515.021350][T11449] kvm_set_msr_common: 3073 callbacks suppressed
[ 1515.021368][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.109292][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.160538][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.212214][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.258881][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.311921][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.348829][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.428854][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
01:07:38 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)

01:07:38 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1515.478839][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
[ 1515.518912][T11449] kvm [11448]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1
01:07:38 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1515.678665][    C0] net_ratelimit: 16 callbacks suppressed
[ 1515.678686][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1515.690188][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
write(0xffffffffffffffff, 0x0, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000004000c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:07:39 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:39 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x81)

01:07:39 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:39 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1515.958642][ T9355] tipc: TX() has been purged, node left!
01:07:39 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

[ 1516.158627][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1516.164472][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

01:07:39 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/null\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

01:07:39 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:39 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)

[ 1516.878658][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1516.884517][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1516.890499][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1516.896254][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:40 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

01:07:40 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:40 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))

01:07:40 executing program 3:
pipe(0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
gettid()
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180))

[ 1517.598751][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1517.604702][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:40 executing program 0:
pipe(&(0x7f0000000200))

01:07:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

[ 1518.622012][ T9355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1518.688704][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1518.727636][ T9355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1518.759561][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1518.791686][ T9355] device bridge_slave_1 left promiscuous mode
[ 1518.797952][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1518.883264][ T9355] device bridge_slave_0 left promiscuous mode
[ 1518.898802][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.953422][ T9355] device veth1_macvtap left promiscuous mode
[ 1518.981812][ T9355] device veth0_macvtap left promiscuous mode
[ 1518.988111][ T9355] device veth1_vlan left promiscuous mode
[ 1519.042210][ T9355] device veth0_vlan left promiscuous mode
[ 1520.439061][ T9355] device hsr_slave_0 left promiscuous mode
[ 1520.488820][ T9355] device hsr_slave_1 left promiscuous mode
[ 1520.551231][ T9355] team0 (unregistering): Port device team_slave_1 removed
[ 1520.562178][ T9355] team0 (unregistering): Port device team_slave_0 removed
[ 1520.572923][ T9355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1520.612210][ T9355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1520.670549][ T9355] bond0 (unregistering): Released all slaves
[ 1520.766311][T11858] IPVS: ftp: loaded support on port[0] = 21
[ 1520.817237][T11858] chnl_net:caif_netlink_parms(): no params data found
[ 1520.848024][T11858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.855662][T11858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1520.863769][T11858] device bridge_slave_0 entered promiscuous mode
[ 1520.871567][T11858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.878783][T11858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1520.886454][T11858] device bridge_slave_1 entered promiscuous mode
[ 1520.960578][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1520.972275][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1520.993676][T11858] team0: Port device team_slave_0 added
[ 1521.001178][T11858] team0: Port device team_slave_1 added
[ 1521.018164][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1521.025390][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1521.051903][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1521.058667][    C1] net_ratelimit: 12 callbacks suppressed
[ 1521.058677][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1521.064111][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1521.068148][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1521.074289][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1521.080967][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1521.080990][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1521.087363][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1521.224256][T11858] device hsr_slave_0 entered promiscuous mode
[ 1521.282423][T11858] device hsr_slave_1 entered promiscuous mode
[ 1521.378723][T11858] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1521.423202][T11858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1521.430327][T11858] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1521.437729][T11858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.444959][T11858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1521.476162][T11858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1521.488135][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1521.497136][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1521.506019][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1521.523524][T11858] 8021q: adding VLAN 0 to HW filter on device team0
[ 1521.543218][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1521.559186][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.566423][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1521.583057][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1521.591722][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1521.598827][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1521.621862][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1521.631227][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1521.640637][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1521.649393][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1521.657936][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1521.669883][T11858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1521.685023][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1521.692745][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1521.703970][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1521.758669][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1521.764471][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1521.778667][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1521.784466][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1521.790091][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1521.799407][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1521.807771][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1521.815817][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1521.825370][T11858] device veth0_vlan entered promiscuous mode
[ 1521.836277][T11858] device veth1_vlan entered promiscuous mode
[ 1521.852564][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1521.861560][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1521.872573][T11858] device veth0_macvtap entered promiscuous mode
[ 1521.881816][T11858] device veth1_macvtap entered promiscuous mode
[ 1521.895661][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1521.906288][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1521.906309][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1521.919367][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.929727][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1521.940304][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.950280][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1521.961451][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.971601][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1521.982376][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.993408][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1522.001509][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1522.009948][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1522.018163][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1522.026862][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1522.037383][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1522.048496][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.059130][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1522.070317][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.080535][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1522.091224][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.101123][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1522.111572][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1522.122651][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1522.131059][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1522.140839][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
01:07:45 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:45 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0)
msgrcv(r0, &(0x7f0000000980)=ANY=[], 0x0, 0xd6d0c418f59fe7d3, 0x1000)

01:07:45 executing program 4:
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0)
msgrcv(0x0, 0x0, 0x0, 0xd6d0c418f59fe7d3, 0x1000)

01:07:45 executing program 0:
pipe(0x0)

01:07:45 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)

01:07:45 executing program 0:
pipe(0x0)

01:07:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:45 executing program 0:
pipe(0x0)

01:07:45 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000040), 0x4)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
gettid()
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r1, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x5, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0xd, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/13}, &(0x7f0000000180)=0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)

01:07:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:45 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')

01:07:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1522.858673][T14269] tipc: TX() has been purged, node left!
01:07:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
socket$unix(0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)

01:07:46 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:46 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000200)='./file0/../file0\x00')

01:07:46 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:07:46 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:46 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:46 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

01:07:46 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:46 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

01:07:47 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

01:07:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1524.071922][T14269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1524.094793][T14269] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1524.132948][T14269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1524.178783][T14269] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1524.203923][T14269] device bridge_slave_1 left promiscuous mode
[ 1524.218706][T14269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1524.272511][T14269] device bridge_slave_0 left promiscuous mode
[ 1524.278942][T14269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1524.337422][T14269] device veth1_macvtap left promiscuous mode
[ 1524.354987][T14269] device veth0_macvtap left promiscuous mode
[ 1524.372448][T14269] device veth1_vlan left promiscuous mode
[ 1524.386596][T14269] device veth0_vlan left promiscuous mode
[ 1525.819019][T14269] device hsr_slave_0 left promiscuous mode
[ 1525.858752][T14269] device hsr_slave_1 left promiscuous mode
[ 1525.910953][T14269] team0 (unregistering): Port device team_slave_1 removed
[ 1525.923069][T14269] team0 (unregistering): Port device team_slave_0 removed
[ 1525.933894][T14269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1525.983116][T14269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1526.062973][T14269] bond0 (unregistering): Released all slaves
[ 1526.558674][    C0] net_ratelimit: 22 callbacks suppressed
[ 1526.558683][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1526.570114][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:50 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000580)="fcdbc8e8f681ca432b62f6b74dd254c1ea4cba82fcf130806408", 0x1a}], 0x1)

01:07:50 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1526.987109][T12590] IPVS: ftp: loaded support on port[0] = 21
[ 1527.075956][T12590] chnl_net:caif_netlink_parms(): no params data found
[ 1527.118064][T12590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.132250][T12590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1527.149515][T12590] device bridge_slave_0 entered promiscuous mode
[ 1527.157439][T12590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.179211][T12590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1527.187026][T12590] device bridge_slave_1 entered promiscuous mode
[ 1527.239074][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1527.278642][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1527.284436][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1527.290227][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1527.295970][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1527.303743][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1527.323727][T12590] team0: Port device team_slave_0 added
[ 1527.330959][T12590] team0: Port device team_slave_1 added
[ 1527.345818][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1527.353204][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1527.380435][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1527.392197][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1527.399279][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1527.425833][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1527.500649][T12590] device hsr_slave_0 entered promiscuous mode
[ 1527.539121][T12590] device hsr_slave_1 entered promiscuous mode
[ 1527.588698][T12590] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1527.645336][T12590] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1527.657677][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1527.667839][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1527.676014][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1527.686095][T12590] 8021q: adding VLAN 0 to HW filter on device team0
[ 1527.696866][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1527.705676][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1527.714095][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.721243][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1527.729437][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1527.739940][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1527.749107][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1527.757681][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.764976][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1527.783037][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1527.791986][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1527.803586][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1527.815572][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1527.827233][T12590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1527.838692][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1527.846661][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1527.861927][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1527.869928][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1527.881075][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1527.931662][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1527.948639][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1527.949047][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1527.954417][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1527.963368][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1527.975719][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1527.985679][T12590] device veth0_vlan entered promiscuous mode
[ 1527.997275][T12590] device veth1_vlan entered promiscuous mode
[ 1528.003408][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1528.009185][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1528.025874][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1528.034154][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1528.042764][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1528.055251][T12590] device veth0_macvtap entered promiscuous mode
[ 1528.064597][T12590] device veth1_macvtap entered promiscuous mode
[ 1528.078018][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1528.089659][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.099634][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1528.110085][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.120305][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1528.130755][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.140629][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1528.151131][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.162514][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1528.170763][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1528.180638][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1528.190411][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1528.201816][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.212173][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1528.222975][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.233026][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1528.243638][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.253604][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1528.264318][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.275833][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1528.284034][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
01:07:51 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000200)='./file0/../file0\x00')

01:07:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0)
sched_setattr(0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

01:07:51 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:51 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0)

01:07:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

01:07:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1528.527452][T12622] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769)
[ 1528.536989][T12622] FAT-fs (loop4): Filesystem has been set read-only
[ 1528.547486][T12622] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769)
01:07:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0)
sched_setattr(0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

01:07:51 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000200)='./file0/../file0\x00')

01:07:51 executing program 3:
syz_open_procfs(0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000cc0)={0x0, {{0x2, 0x4e21, @loopback}}, 0x0, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/1414], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4000)

01:07:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xb, 0x1, 0x95, 0x0}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:52 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

01:07:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_yield()
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

01:07:52 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:52 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

01:07:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0)
sched_setattr(0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

01:07:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:52 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0)

01:07:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x0, 0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x78)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)

01:07:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xb, 0x1, 0x95, 0x0}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

[ 1529.998338][T12894] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769)
[ 1530.007626][T12894] FAT-fs (loop4): Filesystem has been set read-only
[ 1530.019346][T12894] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769)
01:07:53 executing program 4:
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

01:07:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
gettid()
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0)

01:07:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x0, 0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x78)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)

[ 1530.356165][   T27] audit: type=1804 audit(1580260073.557:181): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1291/file0/bus" dev="ramfs" ino=154093 res=1
[ 1530.383127][   T27] audit: type=1804 audit(1580260073.557:182): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1291/file0/bus" dev="ramfs" ino=154093 res=1
[ 1530.439118][   T27] audit: type=1804 audit(1580260073.557:183): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1291/file0/bus" dev="ramfs" ino=154093 res=1
01:07:53 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xb, 0x1, 0x95, 0x0}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:53 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = gettid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x31}, 0x4000, 0x61d2, 0x0, 0x2, 0x32, 0x7, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

[ 1530.715878][   T27] audit: type=1804 audit(1580260073.917:184): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1291/file0/bus" dev="ramfs" ino=154093 res=1
01:07:54 executing program 4:
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

01:07:54 executing program 3:
r0 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)

01:07:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r0 = gettid()
perf_event_open(0x0, r0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x31}, 0x4000, 0x61d2, 0x1, 0x0, 0x32, 0x7, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0xc004743e, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

[ 1531.056039][   T27] audit: type=1804 audit(1580260074.257:185): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1292/file0/bus" dev="ramfs" ino=154160 res=1
[ 1531.186715][   T27] audit: type=1804 audit(1580260074.257:186): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1292/file0/bus" dev="ramfs" ino=154160 res=1
01:07:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r0 = gettid()
perf_event_open(0x0, r0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x31}, 0x4000, 0x61d2, 0x1, 0x0, 0x32, 0x7, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0xc004743e, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

[ 1531.305213][   T27] audit: type=1804 audit(1580260074.297:187): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1292/file0/bus" dev="ramfs" ino=154160 res=1
01:07:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000012c0)={0x53, 0x0, 0x7, 0x2, @scatter={0x1, 0x0, &(0x7f0000000040)=[{0x0}]}, &(0x7f0000000240)="8fb9ebd5fb26a1", 0x0, 0x4, 0x0, 0x0, 0x0})
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)

01:07:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:54 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

[ 1531.483754][   T27] audit: type=1804 audit(1580260074.687:188): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir476786570/syzkaller.diuRoe/1292/file0/bus" dev="ramfs" ino=154160 res=1
01:07:54 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)

01:07:54 executing program 3:
socketpair(0x8000000000001e, 0x6, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x3c00, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0x20)
ioctl(r3, 0x1000008915, &(0x7f0000000340)="1fceee2a4dfdfc3dfc9e9a689fa6f7bd6dbca05263c28907c9788485c1860e2705314872c1de27e05933c15910c7d0380feb8d5782020ea65e9a7efef29ebc1ed1063448f8251742e8909e2645416dfa9694e702fb7f76f8c12d7988a47e0565127de79516d1a937b8326d3d1a95132205b665")
r4 = accept(r3, &(0x7f0000000880)=@caif=@util, &(0x7f0000000900)=0x80)
setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000080)=0xfd1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010005}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000227bd70001f000000010000000000000008410000004c00180000000075647000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0876e28ddfa2d9a747b3b3ff37b51bf4ba7aa92a2a79df909b14afec404ecdaa572c75b873bcd2313e31cb8aa9c540e9f2a58a6e0dbeeb8c68add0ec2cfbedd1666cc2f38630eae5a34ca8ad27c6cc931a6f531d411e7e9a111567407fd172d11ef4a8ed02f62d93c4aeae3071b0a4f187209ad34f01971c0b541afe69063c6a9ab3fda6161dd91aed352f7a6f4c0b84627694e95a39cb44e220abe71593392861d44100000000000000000000000000000000000000002470d3a300000000000000000004000000000000000000000000560e5535b5759552eab84d70a6d090a036aba25d2bda70a8e79b82e7d400bd0063e7e4377b08fdabe0e9fb2d9b5cb0d2c2af17fe8088b90a9cb946393276f7cdb6024b463cadc2b54ba563de7b3947eeffce1234be975a0afe7e3daf3886e19da0bc3f0a447523a497f1cc74a4351fd8c719d3eab0773153290c1e4fc1956486fcbc2d43a6e05b97bcc7178d03e8bff5e12bafea6cb6d77c06037552836370"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
socket(0x10, 0x80002, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
listen(r8, 0x2)
accept4$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x2, 0x80000)

01:07:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:55 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:55 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:55 executing program 5:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040))

01:07:55 executing program 3:
socketpair(0x8000000000001e, 0x6, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x3c00, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0x20)
ioctl(r3, 0x1000008915, &(0x7f0000000340)="1fceee2a4dfdfc3dfc9e9a689fa6f7bd6dbca05263c28907c9788485c1860e2705314872c1de27e05933c15910c7d0380feb8d5782020ea65e9a7efef29ebc1ed1063448f8251742e8909e2645416dfa9694e702fb7f76f8c12d7988a47e0565127de79516d1a937b8326d3d1a95132205b665")
r4 = accept(r3, &(0x7f0000000880)=@caif=@util, &(0x7f0000000900)=0x80)
setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000080)=0xfd1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010005}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
socket(0x10, 0x80002, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
listen(r8, 0x2)
accept4$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x2, 0x80000)

01:07:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7700a4000000200000009620000000000000a4000000000000000000", 0xffffffe5}], 0x2)

01:07:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:55 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

[ 1532.158643][    C0] net_ratelimit: 22 callbacks suppressed
[ 1532.158654][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1532.170124][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1532.398719][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1532.404651][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:55 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000))
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:55 executing program 4:
request_key(&(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0)

01:07:55 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000800)='./file0\x00', 0xa400295c)
open(&(0x7f00000000c0)='./file0/file0\x00', 0x24943, 0x0)

01:07:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7700a4000000200000009620000000000000a4000000000000000000", 0xffffffe5}], 0x2)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:07:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

[ 1532.628539][   T27] audit: type=1800 audit(1580260075.827:189): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16792 res=0
01:07:55 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7700a4000000200000009620000000000000a4000000000000000000", 0xffffffe5}], 0x2)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:07:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1c74000000003000000054a23fedf266b0000000a00ffffffff0100001e00ef07000100000000000a00aabb0000d05249c0b9bceff2dfd70e6605e0f891f06c2ea1d8445b9c4eaba2f898e58215a25ba131c4baccb39dbd5bd47fb33274108bc9e5d9b803567d1d191d94f4859377cece35417d167e27b21d0101b11b6d8e5075f23b314ececa8439981f11c0446538000000000000"], 0x34}}, 0x0)

[ 1532.798691][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1532.804913][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:07:56 executing program 5:
syz_open_procfs(0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/1414], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4000)

[ 1533.058672][T13595] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
01:07:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:56 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000))
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:56 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10)
ioctl$TUNSETFILTEREBPF(r1, 0xc0c0583b, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xb, 0x1, 0x0, 0x0}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r6, 0xc0c0583b, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:56 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000633377fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

01:07:56 executing program 5:
rt_sigprocmask(0x2, &(0x7f00000000c0), 0x0, 0x8)

01:07:56 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000002)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
dup2(r2, r0)
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)

01:07:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1533.518623][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1533.524595][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1533.530395][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1533.536171][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:07:56 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r2, 0x0, &(0x7f0000000180))

01:07:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

01:07:57 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f089061fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

01:07:57 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1, 0x3)

01:07:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:57 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000))
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:57 executing program 5:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f00000009c0))
syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x0)
r2 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0)
readv(r2, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000003c3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
dup(0xffffffffffffffff)

01:07:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10)
ioctl$TUNSETFILTEREBPF(r1, 0xc0c0583b, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xb, 0x1, 0x0, 0x0}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r6, 0xc0c0583b, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0)
pipe(&(0x7f0000000680))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0)

01:07:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10)
ioctl$TUNSETFILTEREBPF(r1, 0xc0c0583b, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080))
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x95, 0x0}, 0x20)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:57 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
poll(&(0x7f00000001c0)=[{r0}, {r2}], 0x2, 0xe23)

01:07:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:58 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10)
ioctl$TUNSETFILTEREBPF(r1, 0xc0c0583b, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080))
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x95, 0x0}, 0x20)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10)
ioctl$TUNSETFILTEREBPF(r1, 0xc0c0583b, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080))
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x95, 0x0}, 0x20)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:58 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)

01:07:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)

01:07:58 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:58 executing program 4:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f", 0x1}], 0x2}, 0x4004045)
splice(r1, 0x0, r0, 0x0, 0x60000, 0x0)

01:07:58 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

01:07:58 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, &(0x7f0000000140)=""/87, 0x57)
getdents64(r0, &(0x7f0000000080)=""/167, 0xa7)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$cont(0x9, r1, 0x0, 0x0)

01:07:58 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x31}, 0x4000, 0x61d2, 0x1, 0x2, 0x32, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:58 executing program 5:
unshare(0x2000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shutdown(0xffffffffffffffff, 0x0)

01:07:58 executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

01:07:58 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000500)=r1)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x6, 0x200, &(0x7f00000004c0)="6cdfaab472ac96191675eb1cc8d300c90010ca864b58cd42e46adc51c5c71a3281f819a4d724eab248bd0206adbe4243c6c257ffaa45778024318b197d6be260f0df26e774fb3506c9c321529f23f123f67f27cc6e581aa590613bdf80368f8658dc6e5999c760b967544e7f06ca4e4b99f5b5a8aae969b1ad868f14cf82ef6f26e1ff8093a8e9d66f03ba2d28289599be595226200dd73cc606cf0f6b1cfb93fca21a48d75bd86734ce029bf820242f3f2bd7a66a63ee4dfc9d6f8f7befb0579d0ff3e62658322b58b9863f3207bf37f46a4b4582e659482854345335b3f7ea2d7624d61a5279a30aacc8d2743e01a35e93fbb7f4a6f7ee401d739090d6695597366404e78deb85518aade43892c665ce677ab9fe64fbcab9b205b0c5acbe6ec7a61dcf3f53b62ca3cfedeb03e980e5b4be68f7465e4a4c6c63589ef855e8ea038960fb67fa028c30ccafa3ae2a32603a51df11cc7eafb014708711d0274f9ca40fd9cc0bc68470703548f0586e17ec137236152924dc47162ec0a1b1dc361a2cd5a82e4bb59153ef77423ceb48447b70913a13a68092f4a5cf010971b0f743d1e3a85ac89cbc21457a66dcd38110981e6f800ceb07db8869ba1d44918089e0a56e8ef5911e936016a8ee4fcbd8b9f781b3eb470e38e0f0e9eb44b9c9f0f44c628f09adbf3c275614d9e9c47ef3fbd7d3764f71155f62bba4f4d77eab01cc411fda96492125f84b63d95d65f64166a8060ac29965d5be16400ca917ee421884c9dbfc02c6bd6243377421dee4b90dceed627b762ef6065683cbb77fc7d6ff3f781ef50acec3d167460355d5d6da0181631c6a4c150426b6fe144c80d2363d9f40e40652be6398c526ff8c50e4d0f04fad6f962525d80969db4d870eb872a099e52d160d3913d7240518356e5ff41ffddc84d55273c236b6857b90c0a8cda8355a9679ae0edc875bb8c721a02d63d3eec3f8af16b2e3424c83805ae613630869748dc91ad44bc042dcb739240fe0cc22d65b1739dffad040e7a5bcbdd1bb47e0d981337feff80f4ff3a4196ce15e89b3a6b5b52aba9778ee5ce4e955e07a87f77aedbf27cceec7978aa790d09fcf300c6df78001ac1073f4e8d268d955a69803b8f9f1e9f2970117d0c64cdc1fad790cef14207ee920058b976cc85792dba33b44123895c9a89911024c9d2bbec9795dd373d5eab1c6b11285b994e5ab3f2f99b7c82151da01897840abf98513989c0c07ba9e04b6b92d51772caf52fda33fb7f5ca3ed678db05ac39c8398af8385855574d255d6c846044875db62ec348df23863c803d4c764f6682341e3eeadb2ee3873aa7462cbd8c9bcc40d8f2c77c0078fd9cc4bbdd3753b382cc71b2552a4f1bdcaaa2f33fb093d7719d58eb0045faf9f87e8962ee704ebfb829e1a7051636b7721394daff82edb41ef5ae8b1dd8a25a"})
r2 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x8a, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0})

01:07:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:58 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xd, 0x12, r3, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000002c0)={0x0, 0x0, 0x0, [], 0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f0000000040))

01:07:59 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x31}, 0x4000, 0x61d2, 0x1, 0x2, 0x32, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:59 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:07:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:59 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69d7})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

01:07:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x31}, 0x4000, 0x0, 0x1, 0x2, 0x32, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:59 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x31}, 0x4000, 0x61d2, 0x1, 0x2, 0x32, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:59 executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

01:07:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:07:59 executing program 0:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[]}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)

01:07:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x31}, 0x4000, 0x0, 0x1, 0x2, 0x32, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1e1200, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff02000000000000000000100000002100000000000000c0", 0x31}], 0x1}, 0x900)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c)

01:07:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}}, 0x0)

01:07:59 executing program 5:
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)={0x3, 0x5})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

01:08:00 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xc, 0x40800, 0x8, 0x81}, 0x3c)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x20)

[ 1536.871860][   T27] audit: type=1804 audit(1580260080.077:190): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/25/file0/bus" dev="ramfs" ino=155911 res=1
[ 1536.956265][   T27] audit: type=1804 audit(1580260080.117:191): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/25/file0/bus" dev="ramfs" ino=155911 res=1
[ 1537.051620][   T27] audit: type=1804 audit(1580260080.117:192): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/25/file0/bus" dev="ramfs" ino=155911 res=1
[ 1537.090013][   T27] audit: type=1804 audit(1580260080.297:193): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/25/file0/bus" dev="ramfs" ino=155911 res=1
01:08:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:00 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:08:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x169840, 0x0)

01:08:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4)
eventfd2(0x0, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
socket$unix(0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)

01:08:00 executing program 5:
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)={0x3, 0x5})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1537.331405][   T27] audit: type=1804 audit(1580260080.537:194): pid=14453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/26/file0/bus" dev="ramfs" ino=155931 res=1
[ 1537.389469][   T27] audit: type=1804 audit(1580260080.537:195): pid=14453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/26/file0/bus" dev="ramfs" ino=155931 res=1
01:08:00 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x2, 0xbb, &(0x7f0000000640)=""/187, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)

01:08:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1537.466460][   T27] audit: type=1804 audit(1580260080.537:196): pid=14453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/26/file0/bus" dev="ramfs" ino=155931 res=1
01:08:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770182100000200000009620000000000000a4000000000000000000", 0xffffffe5}], 0x2)

[ 1537.566308][   T27] audit: type=1804 audit(1580260080.737:197): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir252713792/syzkaller.mmIYW4/26/file0/bus" dev="ramfs" ino=155931 res=1
[ 1537.688639][    C1] net_ratelimit: 16 callbacks suppressed
[ 1537.688648][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1537.700298][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1537.706063][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1537.711834][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:08:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:01 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r0)

01:08:01 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x10)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x0, 0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x2, 0xbb, &(0x7f0000000640)=""/187, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0x0, [], 0x0, 0x16, r2, 0x8, &(0x7f0000000400)={0x6}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x78)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r5, 0xc0c0583b, 0x0)

01:08:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[ 1538.120910][T14576] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1538.142299][T14576] CPU: 1 PID: 14576 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1538.151023][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1538.161210][T14576] Call Trace:
[ 1538.164520][T14576]  dump_stack+0x11d/0x181
[ 1538.168981][T14576]  dump_header+0xaa/0x39c
[ 1538.173401][T14576]  oom_kill_process.cold+0x10/0x15
[ 1538.178580][T14576]  out_of_memory+0x231/0xa60
[ 1538.183279][T14576]  mem_cgroup_out_of_memory+0x128/0x150
[ 1538.188852][T14576]  try_charge+0xb6c/0xbf0
[ 1538.193377][T14576]  ? rcu_note_context_switch+0x720/0x760
[ 1538.199332][T14576]  mem_cgroup_try_charge+0xd2/0x260
[ 1538.204660][T14576]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1538.210441][T14576]  wp_page_copy+0x322/0x1040
[ 1538.215054][T14576]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1538.221790][T14576]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1538.227533][T14576]  do_wp_page+0x192/0xeb0
[ 1538.231965][T14576]  ? __sanitizer_cov_trace_pc+0x48/0x50
[ 1538.237542][T14576]  __handle_mm_fault+0x1d16/0x2e00
[ 1538.242806][T14576]  handle_mm_fault+0x21b/0x530
[ 1538.247651][T14576]  __do_page_fault+0x456/0x8d0
[ 1538.252641][T14576]  do_page_fault+0x38/0x194
[ 1538.257228][T14576]  page_fault+0x34/0x40
[ 1538.261423][T14576] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1538.268148][T14576] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1538.287771][T14576] RSP: 0018:ffffc90001c239a0 EFLAGS: 00010206
[ 1538.293978][T14576] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000006e20
[ 1538.301973][T14576] RDX: 00000000000101d0 RSI: ffff88809e1e9498 RDI: 000000002021d000
[ 1538.309965][T14576] RBP: ffffc90001c239d8 R08: ffff888122953000 R09: 0000888122953b50
[ 1538.317962][T14576] R10: 0000c900019d3d70 R11: 0000888122953b57 R12: 0000000020213c50
[ 1538.326019][T14576] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1538.334031][T14576]  ? copyout+0xa5/0xb0
[ 1538.338143][T14576]  _copy_to_iter+0x170/0x9b0
[ 1538.342762][T14576]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1538.349186][T14576]  ? __virt_addr_valid+0x126/0x190
[ 1538.354321][T14576]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1538.360373][T14576]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1538.366201][T14576]  simple_copy_to_iter+0x5a/0x80
[ 1538.372512][T14576]  __skb_datagram_iter+0xa8/0x460
[ 1538.377722][T14576]  ? skb_copy_datagram_iter+0x170/0x170
[ 1538.383288][T14576]  ? tipc_node_xmit_skb+0x112/0x140
[ 1538.388518][T14576]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1538.394821][T14576]  skb_copy_datagram_iter+0x66/0x170
[ 1538.398714][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1538.400128][T14576]  tipc_recvstream+0x29d/0x6c0
[ 1538.400185][T14576]  ? security_socket_recvmsg+0x92/0xb0
[ 1538.405888][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1538.410637][T14576]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1538.410660][T14576]  sock_recvmsg+0x92/0xb0
[ 1538.410689][T14576]  ____sys_recvmsg+0x167/0x3a0
[ 1538.436346][T14576]  ___sys_recvmsg+0xb2/0x100
[ 1538.440993][T14576]  ? __fget_light+0xaf/0x190
[ 1538.445692][T14576]  ? __fdget+0x2c/0x40
[ 1538.449816][T14576]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1538.456808][T14576]  __sys_recvmsg+0x9d/0x160
[ 1538.461360][T14576]  __x64_sys_recvmsg+0x51/0x70
[ 1538.466143][T14576]  do_syscall_64+0xcc/0x3a0
[ 1538.470714][T14576]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1538.476622][T14576] RIP: 0033:0x45b349
[ 1538.480553][T14576] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1538.500519][T14576] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1538.508979][T14576] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
01:08:01 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:08:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)

01:08:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1538.517221][T14576] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1538.525209][T14576] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1538.533278][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1538.541393][T14576] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
01:08:01 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

[ 1538.602588][T14576] memory: usage 307200kB, limit 307200kB, failcnt 6318
[ 1538.610575][T14576] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1538.617558][T14576] Memory cgroup stats for /syz0:
[ 1538.617715][T14576] anon 242503680
[ 1538.617715][T14576] file 28672
[ 1538.617715][T14576] kernel_stack 6967296
[ 1538.617715][T14576] slab 9773056
[ 1538.617715][T14576] sock 0
[ 1538.617715][T14576] shmem 12288
[ 1538.617715][T14576] file_mapped 0
[ 1538.617715][T14576] file_dirty 0
[ 1538.617715][T14576] file_writeback 0
[ 1538.617715][T14576] anon_thp 205520896
[ 1538.617715][T14576] inactive_anon 0
[ 1538.617715][T14576] active_anon 242503680
[ 1538.617715][T14576] inactive_file 135168
[ 1538.617715][T14576] active_file 0
[ 1538.617715][T14576] unevictable 0
[ 1538.617715][T14576] slab_reclaimable 540672
[ 1538.617715][T14576] slab_unreclaimable 9232384
[ 1538.617715][T14576] pgfault 103257
[ 1538.617715][T14576] pgmajfault 0
[ 1538.617715][T14576] workingset_refault 99
[ 1538.617715][T14576] workingset_activate 99
[ 1538.617715][T14576] workingset_nodereclaim 0
[ 1538.617715][T14576] pgrefill 1372
[ 1538.617715][T14576] pgscan 1516
[ 1538.617715][T14576] pgsteal 412
[ 1538.638671][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1538.718994][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1538.739452][T14576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14575,uid=0
[ 1538.756616][T14576] Memory cgroup out of memory: Killed process 14575 (syz-executor.0) total-vm:72848kB, anon-rss:2168kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1538.779300][  T609] oom_reaper: reaped process 14575 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB
01:08:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x10)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x0, 0x0})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000005f00))
bpf$PROG_LOAD(0x5, &(0x7f0000015340)={0x0, 0x0, 0x0, 0x0, 0x2, 0xbb, &(0x7f0000000640)=""/187, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0x0, [], 0x0, 0x16, r2, 0x8, &(0x7f0000000400)={0x6}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x78)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r5, 0xc0c0583b, 0x0)

01:08:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:02 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:02 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1539.038686][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1539.044622][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:08:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1539.325760][T14837] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1539.359094][T14837] CPU: 1 PID: 14837 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1539.367821][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1539.377894][T14837] Call Trace:
[ 1539.381337][T14837]  dump_stack+0x11d/0x181
[ 1539.385686][T14837]  dump_header+0xaa/0x39c
[ 1539.390150][T14837]  oom_kill_process.cold+0x10/0x15
[ 1539.395576][T14837]  out_of_memory+0x231/0xa60
[ 1539.400231][T14837]  mem_cgroup_out_of_memory+0x128/0x150
[ 1539.405815][T14837]  try_charge+0xb6c/0xbf0
[ 1539.410350][T14837]  ? rcu_note_context_switch+0x720/0x760
[ 1539.416093][T14837]  mem_cgroup_try_charge+0xd2/0x260
[ 1539.421347][T14837]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1539.427005][T14837]  wp_page_copy+0x322/0x1040
[ 1539.431633][T14837]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1539.437561][T14837]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1539.443336][T14837]  do_wp_page+0x192/0xeb0
[ 1539.447691][T14837]  __handle_mm_fault+0x1d16/0x2e00
[ 1539.452930][T14837]  handle_mm_fault+0x21b/0x530
[ 1539.457726][T14837]  __do_page_fault+0x456/0x8d0
[ 1539.462642][T14837]  do_page_fault+0x38/0x194
[ 1539.467192][T14837]  page_fault+0x34/0x40
01:08:02 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1539.471411][T14837] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1539.478149][T14837] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1539.497874][T14837] RSP: 0018:ffffc90001ddb9a0 EFLAGS: 00010206
[ 1539.503959][T14837] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000006e20
[ 1539.511946][T14837] RDX: 00000000000101d0 RSI: ffff88809f3e9498 RDI: 000000002021d000
[ 1539.519934][T14837] RBP: ffffc90001ddb9d8 R08: ffff8880573760c0 R09: 0000888057376c10
[ 1539.528065][T14837] R10: 0000000000000000 R11: 0000888057376c17 R12: 0000000020213c50
[ 1539.536058][T14837] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1539.544128][T14837]  ? copyout+0xa5/0xb0
[ 1539.548257][T14837]  _copy_to_iter+0x170/0x9b0
[ 1539.552935][T14837]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1539.559307][T14837]  ? __virt_addr_valid+0x126/0x190
[ 1539.564501][T14837]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1539.570532][T14837]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
01:08:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1539.576276][T14837]  simple_copy_to_iter+0x5a/0x80
[ 1539.581240][T14837]  __skb_datagram_iter+0xa8/0x460
[ 1539.586296][T14837]  ? skb_copy_datagram_iter+0x170/0x170
[ 1539.591864][T14837]  ? apic_timer_interrupt+0xa/0x20
[ 1539.597063][T14837]  skb_copy_datagram_iter+0x66/0x170
[ 1539.602375][T14837]  ? tipc_recvstream+0x19d/0x6c0
[ 1539.607461][T14837]  tipc_recvstream+0x29d/0x6c0
[ 1539.612266][T14837]  ? security_socket_recvmsg+0x92/0xb0
[ 1539.618203][T14837]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1539.623020][T14837]  sock_recvmsg+0x92/0xb0
[ 1539.627375][T14837]  ____sys_recvmsg+0x167/0x3a0
[ 1539.632193][T14837]  ___sys_recvmsg+0xb2/0x100
[ 1539.636886][T14837]  ? __tsan_unaligned_write4+0x68/0x110
[ 1539.642460][T14837]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1539.648885][T14837]  __sys_recvmsg+0x9d/0x160
[ 1539.653520][T14837]  __x64_sys_recvmsg+0x51/0x70
[ 1539.658548][T14837]  do_syscall_64+0xcc/0x3a0
[ 1539.663143][T14837]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1539.669580][T14837] RIP: 0033:0x45b349
[ 1539.673491][T14837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1539.693239][T14837] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1539.701793][T14837] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1539.709892][T14837] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1539.717889][T14837] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1539.725904][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1539.733906][T14837] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
01:08:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x201fc, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

[ 1539.870231][T14837] memory: usage 307200kB, limit 307200kB, failcnt 6399
[ 1539.886374][T14837] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1539.902486][T14837] Memory cgroup stats for /syz0:
[ 1539.902707][T14837] anon 242540544
[ 1539.902707][T14837] file 28672
[ 1539.902707][T14837] kernel_stack 6967296
01:08:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{}, {}, {0x0, 0x0, 0x0, 0x6e}]})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1539.902707][T14837] slab 9773056
[ 1539.902707][T14837] sock 0
[ 1539.902707][T14837] shmem 12288
[ 1539.902707][T14837] file_mapped 0
[ 1539.902707][T14837] file_dirty 0
[ 1539.902707][T14837] file_writeback 0
[ 1539.902707][T14837] anon_thp 205520896
[ 1539.902707][T14837] inactive_anon 0
[ 1539.902707][T14837] active_anon 242577408
[ 1539.902707][T14837] inactive_file 135168
[ 1539.902707][T14837] active_file 0
[ 1539.902707][T14837] unevictable 0
[ 1539.902707][T14837] slab_reclaimable 540672
[ 1539.902707][T14837] slab_unreclaimable 9232384
01:08:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1539.902707][T14837] pgfault 103521
[ 1539.902707][T14837] pgmajfault 0
[ 1539.902707][T14837] workingset_refault 99
[ 1539.902707][T14837] workingset_activate 99
[ 1539.902707][T14837] workingset_nodereclaim 0
[ 1539.902707][T14837] pgrefill 1372
[ 1539.902707][T14837] pgscan 1516
[ 1539.902707][T14837] pgsteal 412
[ 1540.003465][T14837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14835,uid=0
01:08:03 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1540.023685][T14837] Memory cgroup out of memory: Killed process 14837 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1540.047580][  T609] oom_reaper: reaped process 14837 (syz-executor.0), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB
01:08:03 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:03 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
pipe(0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4)
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000280)='./file0/file0\x00')

01:08:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{}, {}, {0x0, 0x0, 0x0, 0x6e}]})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:03 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:08:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:03 executing program 3:

[ 1540.694649][T15099] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
01:08:03 executing program 5:

[ 1540.736018][T15099] CPU: 1 PID: 15099 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1540.744800][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1540.755006][T15099] Call Trace:
[ 1540.758344][T15099]  dump_stack+0x11d/0x181
[ 1540.762891][T15099]  dump_header+0xaa/0x39c
[ 1540.767361][T15099]  oom_kill_process.cold+0x10/0x15
[ 1540.772672][T15099]  out_of_memory+0x231/0xa60
[ 1540.777392][T15099]  mem_cgroup_out_of_memory+0x128/0x150
[ 1540.783073][T15099]  try_charge+0xb6c/0xbf0
[ 1540.787461][T15099]  ? rcu_note_context_switch+0x720/0x760
[ 1540.793857][T15099]  mem_cgroup_try_charge+0xd2/0x260
[ 1540.799256][T15099]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1540.804903][T15099]  wp_page_copy+0x322/0x1040
[ 1540.809682][T15099]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1540.815606][T15099]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1540.821343][T15099]  do_wp_page+0x192/0xeb0
[ 1540.825693][T15099]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1540.832141][T15099]  __handle_mm_fault+0x1d16/0x2e00
[ 1540.837340][T15099]  handle_mm_fault+0x21b/0x530
[ 1540.844845][T15099]  __do_page_fault+0x456/0x8d0
[ 1540.849876][T15099]  do_page_fault+0x38/0x194
[ 1540.854403][T15099]  page_fault+0x34/0x40
[ 1540.858657][T15099] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1540.865265][T15099] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1540.885101][T15099] RSP: 0018:ffffc90002aff9a0 EFLAGS: 00010206
[ 1540.891198][T15099] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000006e20
[ 1540.899286][T15099] RDX: 00000000000101d0 RSI: ffff88809f389498 RDI: 000000002021d000
[ 1540.907283][T15099] RBP: ffffc90002aff9d8 R08: ffff88809cb85000 R09: 000088809cb85b50
[ 1540.915536][T15099] R10: 0000000000000000 R11: 000088809cb85b57 R12: 0000000020213c50
[ 1540.923704][T15099] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1540.931805][T15099]  ? copyout+0xa5/0xb0
[ 1540.935953][T15099]  _copy_to_iter+0x170/0x9b0
[ 1540.940670][T15099]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1540.946921][T15099]  ? __virt_addr_valid+0x126/0x190
[ 1540.952102][T15099]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1540.958057][T15099]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1540.963865][T15099]  simple_copy_to_iter+0x5a/0x80
[ 1540.969398][T15099]  __skb_datagram_iter+0xa8/0x460
[ 1540.974532][T15099]  ? skb_copy_datagram_iter+0x170/0x170
[ 1540.980121][T15099]  ? remove_wait_queue+0x54/0x60
[ 1540.985080][T15099]  skb_copy_datagram_iter+0x66/0x170
[ 1540.990515][T15099]  tipc_recvstream+0x29d/0x6c0
[ 1540.995293][T15099]  ? security_socket_recvmsg+0x92/0xb0
[ 1541.000748][T15099]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1541.005505][T15099]  sock_recvmsg+0x92/0xb0
[ 1541.009839][T15099]  ____sys_recvmsg+0x167/0x3a0
[ 1541.014784][T15099]  ___sys_recvmsg+0xb2/0x100
[ 1541.019418][T15099]  ? __fget_light+0xaf/0x190
[ 1541.024039][T15099]  ? __fdget+0x2c/0x40
[ 1541.028192][T15099]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1541.034449][T15099]  __sys_recvmsg+0x9d/0x160
[ 1541.039039][T15099]  __x64_sys_recvmsg+0x51/0x70
[ 1541.044016][T15099]  do_syscall_64+0xcc/0x3a0
[ 1541.048556][T15099]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1541.054547][T15099] RIP: 0033:0x45b349
[ 1541.058491][T15099] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1541.078281][T15099] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1541.086727][T15099] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1541.094847][T15099] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1541.102807][T15099] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1541.110779][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1541.118987][T15099] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1541.142670][T15099] memory: usage 307200kB, limit 307200kB, failcnt 6436
[ 1541.175577][T15099] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1541.198634][T15099] Memory cgroup stats for /syz0:
[ 1541.198884][T15099] anon 242528256
[ 1541.198884][T15099] file 28672
[ 1541.198884][T15099] kernel_stack 6967296
[ 1541.198884][T15099] slab 9773056
[ 1541.198884][T15099] sock 0
[ 1541.198884][T15099] shmem 12288
[ 1541.198884][T15099] file_mapped 0
[ 1541.198884][T15099] file_dirty 0
[ 1541.198884][T15099] file_writeback 0
[ 1541.198884][T15099] anon_thp 205520896
[ 1541.198884][T15099] inactive_anon 0
[ 1541.198884][T15099] active_anon 242556928
[ 1541.198884][T15099] inactive_file 135168
[ 1541.198884][T15099] active_file 0
[ 1541.198884][T15099] unevictable 0
[ 1541.198884][T15099] slab_reclaimable 540672
[ 1541.198884][T15099] slab_unreclaimable 9232384
[ 1541.198884][T15099] pgfault 103653
[ 1541.198884][T15099] pgmajfault 0
[ 1541.198884][T15099] workingset_refault 99
[ 1541.198884][T15099] workingset_activate 99
[ 1541.198884][T15099] workingset_nodereclaim 0
[ 1541.198884][T15099] pgrefill 1372
[ 1541.198884][T15099] pgscan 1516
[ 1541.198884][T15099] pgsteal 412
01:08:04 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lgetxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@known='system.advise\x00', &(0x7f0000000780)=""/54, 0x36)

01:08:04 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "45647609ea139dc0"})

01:08:04 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1541.394995][T15099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15094,uid=0
[ 1541.414475][T15099] Memory cgroup out of memory: Killed process 15099 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
01:08:04 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

[ 1541.509402][  T609] oom_reaper: reaped process 15099 (syz-executor.0), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB
01:08:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:04 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:05 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:05 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
creat(&(0x7f0000000380)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0)
truncate(&(0x7f0000000080)='./bus\x00', 0x8b3e)
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3)

[ 1542.130472][T15248] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1542.144563][T15248] CPU: 0 PID: 15248 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1542.153274][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1542.163593][T15248] Call Trace:
[ 1542.166903][T15248]  dump_stack+0x11d/0x181
[ 1542.171287][T15248]  dump_header+0xaa/0x39c
[ 1542.175638][T15248]  oom_kill_process.cold+0x10/0x15
[ 1542.180875][T15248]  out_of_memory+0x231/0xa60
[ 1542.185511][T15248]  mem_cgroup_out_of_memory+0x128/0x150
[ 1542.191272][T15248]  try_charge+0xb6c/0xbf0
[ 1542.195730][T15248]  ? rcu_note_context_switch+0x720/0x760
[ 1542.201452][T15248]  mem_cgroup_try_charge+0xd2/0x260
[ 1542.206692][T15248]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1542.212466][T15248]  wp_page_copy+0x322/0x1040
[ 1542.217076][T15248]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1542.223276][T15248]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1542.229061][T15248]  do_wp_page+0x192/0xeb0
[ 1542.233417][T15248]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1542.239330][T15248]  __handle_mm_fault+0x1d16/0x2e00
[ 1542.244883][T15248]  handle_mm_fault+0x21b/0x530
[ 1542.249675][T15248]  __do_page_fault+0x456/0x8d0
[ 1542.254462][T15248]  do_page_fault+0x38/0x194
[ 1542.258991][T15248]  page_fault+0x34/0x40
[ 1542.263166][T15248] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1542.270276][T15248] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1542.290095][T15248] RSP: 0018:ffffc90002c379a0 EFLAGS: 00010206
[ 1542.296171][T15248] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000006e20
[ 1542.304328][T15248] RDX: 00000000000101d0 RSI: ffff88809f3a9498 RDI: 000000002021d000
[ 1542.312573][T15248] RBP: ffffc90002c379d8 R08: ffff88809cb85000 R09: 000088809cb85b50
[ 1542.320675][T15248] R10: 0000000000000000 R11: 000088809cb85b57 R12: 0000000020213c50
[ 1542.328780][T15248] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1542.336802][T15248]  ? copyout+0xa5/0xb0
[ 1542.340977][T15248]  _copy_to_iter+0x170/0x9b0
[ 1542.345738][T15248]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1542.352228][T15248]  ? __virt_addr_valid+0x126/0x190
[ 1542.357486][T15248]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1542.363521][T15248]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1542.369307][T15248]  simple_copy_to_iter+0x5a/0x80
[ 1542.374340][T15248]  __skb_datagram_iter+0xa8/0x460
[ 1542.379414][T15248]  ? skb_copy_datagram_iter+0x170/0x170
[ 1542.384991][T15248]  ? tipc_node_xmit_skb+0x112/0x140
[ 1542.390343][T15248]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1542.396784][T15248]  skb_copy_datagram_iter+0x66/0x170
[ 1542.402129][T15248]  tipc_recvstream+0x29d/0x6c0
[ 1542.406936][T15248]  ? security_socket_recvmsg+0x92/0xb0
[ 1542.412428][T15248]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1542.417852][T15248]  sock_recvmsg+0x92/0xb0
[ 1542.422318][T15248]  ____sys_recvmsg+0x167/0x3a0
[ 1542.427242][T15248]  ___sys_recvmsg+0xb2/0x100
[ 1542.431865][T15248]  ? __fget_light+0xaf/0x190
[ 1542.436717][T15248]  ? __fdget+0x2c/0x40
[ 1542.440814][T15248]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1542.447393][T15248]  __sys_recvmsg+0x9d/0x160
[ 1542.451940][T15248]  __x64_sys_recvmsg+0x51/0x70
[ 1542.456946][T15248]  do_syscall_64+0xcc/0x3a0
[ 1542.461484][T15248]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1542.467409][T15248] RIP: 0033:0x45b349
[ 1542.471394][T15248] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1542.491137][T15248] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1542.499732][T15248] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1542.507716][T15248] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1542.515810][T15248] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1542.523975][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
01:08:05 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:08:05 executing program 5:

[ 1542.531957][T15248] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1542.541816][   T27] audit: type=1804 audit(1580260085.347:198): pid=15371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir885668923/syzkaller.lQ3qdt/634/file0/bus" dev="ramfs" ino=156258 res=1
[ 1542.571055][T15248] memory: usage 307180kB, limit 307200kB, failcnt 6456
[ 1542.578150][T15248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1542.585125][T15248] Memory cgroup stats for /syz0:
[ 1542.585338][T15248] anon 242515968
[ 1542.585338][T15248] file 28672
[ 1542.585338][T15248] kernel_stack 6930432
[ 1542.585338][T15248] slab 9773056
[ 1542.585338][T15248] sock 0
[ 1542.585338][T15248] shmem 12288
[ 1542.585338][T15248] file_mapped 0
[ 1542.585338][T15248] file_dirty 0
[ 1542.585338][T15248] file_writeback 0
[ 1542.585338][T15248] anon_thp 205520896
[ 1542.585338][T15248] inactive_anon 0
[ 1542.585338][T15248] active_anon 242544640
01:08:05 executing program 3:

[ 1542.585338][T15248] inactive_file 135168
[ 1542.585338][T15248] active_file 0
[ 1542.585338][T15248] unevictable 0
[ 1542.585338][T15248] slab_reclaimable 540672
[ 1542.585338][T15248] slab_unreclaimable 9232384
[ 1542.585338][T15248] pgfault 103752
[ 1542.585338][T15248] pgmajfault 0
[ 1542.585338][T15248] workingset_refault 99
[ 1542.585338][T15248] workingset_activate 99
[ 1542.585338][T15248] workingset_nodereclaim 0
[ 1542.585338][T15248] pgrefill 1372
[ 1542.585338][T15248] pgscan 1516
[ 1542.585338][T15248] pgsteal 412
01:08:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1542.878698][    C0] net_ratelimit: 16 callbacks suppressed
[ 1542.878708][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1542.892169][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:08:06 executing program 3:

01:08:06 executing program 5:

[ 1542.919593][T15248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15245,uid=0
01:08:06 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1542.975947][T15248] Memory cgroup out of memory: Killed process 15248 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1543.064211][  T609] oom_reaper: reaped process 15248 (syz-executor.0), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB
01:08:06 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)

01:08:06 executing program 3:

01:08:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:06 executing program 5:

[ 1543.198790][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1543.204628][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:08:06 executing program 3:

01:08:06 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49)

01:08:06 executing program 5:

01:08:06 executing program 3:

01:08:06 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1543.623868][T15508] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1543.663614][T15508] CPU: 0 PID: 15508 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1543.672425][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1543.682504][T15508] Call Trace:
[ 1543.685821][T15508]  dump_stack+0x11d/0x181
[ 1543.690256][T15508]  dump_header+0xaa/0x39c
[ 1543.694612][T15508]  oom_kill_process.cold+0x10/0x15
[ 1543.699936][T15508]  out_of_memory+0x231/0xa60
[ 1543.704556][T15508]  mem_cgroup_out_of_memory+0x128/0x150
[ 1543.710127][T15508]  try_charge+0xb6c/0xbf0
[ 1543.714503][T15508]  ? rcu_note_context_switch+0x720/0x760
[ 1543.720240][T15508]  mem_cgroup_try_charge+0xd2/0x260
[ 1543.725468][T15508]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1543.731117][T15508]  wp_page_copy+0x322/0x1040
[ 1543.735726][T15508]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1543.741644][T15508]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1543.747533][T15508]  do_wp_page+0x192/0xeb0
[ 1543.751872][T15508]  ? pmd_val+0x17/0x60
[ 1543.755977][T15508]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1543.761895][T15508]  __handle_mm_fault+0x1d16/0x2e00
[ 1543.767140][T15508]  handle_mm_fault+0x21b/0x530
[ 1543.771977][T15508]  __do_page_fault+0x456/0x8d0
[ 1543.776884][T15508]  do_page_fault+0x38/0x194
[ 1543.781412][T15508]  page_fault+0x34/0x40
[ 1543.785629][T15508] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1543.792374][T15508] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1543.812155][T15508] RSP: 0018:ffffc90002fdf9a0 EFLAGS: 00010206
[ 1543.818228][T15508] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000002e20
[ 1543.826344][T15508] RDX: 00000000000101d0 RSI: ffff88809d98d498 RDI: 0000000020221000
[ 1543.834334][T15508] RBP: ffffc90002fdf9d8 R08: ffff888052038000 R09: 0000888052038b50
[ 1543.842322][T15508] R10: 0000000000000000 R11: 0000888052038b57 R12: 0000000020213c50
[ 1543.850314][T15508] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1543.858339][T15508]  ? copyout+0xa5/0xb0
[ 1543.862430][T15508]  _copy_to_iter+0x170/0x9b0
[ 1543.867188][T15508]  ? __sanitizer_cov_trace_pc+0x1a/0x50
[ 1543.872800][T15508]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1543.878808][T15508]  simple_copy_to_iter+0x5a/0x80
[ 1543.883762][T15508]  __skb_datagram_iter+0xa8/0x460
[ 1543.888886][T15508]  ? skb_copy_datagram_iter+0x170/0x170
[ 1543.894460][T15508]  ? tipc_node_xmit_skb+0x112/0x140
[ 1543.899944][T15508]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1543.906234][T15508]  skb_copy_datagram_iter+0x66/0x170
[ 1543.911700][T15508]  tipc_recvstream+0x29d/0x6c0
[ 1543.916527][T15508]  ? security_socket_recvmsg+0x92/0xb0
[ 1543.922117][T15508]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1543.927004][T15508]  sock_recvmsg+0x92/0xb0
[ 1543.931493][T15508]  ____sys_recvmsg+0x167/0x3a0
[ 1543.936292][T15508]  ___sys_recvmsg+0xb2/0x100
[ 1543.941162][T15508]  ? __fget_light+0xaf/0x190
[ 1543.945771][T15508]  ? __fdget+0x2c/0x40
[ 1543.949864][T15508]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1543.956224][T15508]  __sys_recvmsg+0x9d/0x160
[ 1543.960815][T15508]  __x64_sys_recvmsg+0x51/0x70
[ 1543.965607][T15508]  do_syscall_64+0xcc/0x3a0
[ 1543.970329][T15508]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1543.976245][T15508] RIP: 0033:0x45b349
[ 1543.980232][T15508] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1543.999940][T15508] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1544.008368][T15508] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1544.016354][T15508] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
01:08:07 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:07 executing program 3:

[ 1544.024620][T15508] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1544.032628][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1544.040621][T15508] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1544.058759][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1544.064573][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:08:07 executing program 5:

[ 1544.070616][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1544.076421][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1544.236329][T15508] memory: usage 307152kB, limit 307200kB, failcnt 6523
[ 1544.250018][T15508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1544.278380][T15508] Memory cgroup stats for /syz0:
[ 1544.278659][T15508] anon 242540544
[ 1544.278659][T15508] file 28672
[ 1544.278659][T15508] kernel_stack 6930432
[ 1544.278659][T15508] slab 9773056
[ 1544.278659][T15508] sock 0
[ 1544.278659][T15508] shmem 12288
[ 1544.278659][T15508] file_mapped 0
[ 1544.278659][T15508] file_dirty 0
[ 1544.278659][T15508] file_writeback 0
[ 1544.278659][T15508] anon_thp 205520896
[ 1544.278659][T15508] inactive_anon 0
[ 1544.278659][T15508] active_anon 242622464
[ 1544.278659][T15508] inactive_file 135168
[ 1544.278659][T15508] active_file 0
[ 1544.278659][T15508] unevictable 0
[ 1544.278659][T15508] slab_reclaimable 540672
[ 1544.278659][T15508] slab_unreclaimable 9232384
[ 1544.278659][T15508] pgfault 103917
[ 1544.278659][T15508] pgmajfault 0
[ 1544.278659][T15508] workingset_refault 99
[ 1544.278659][T15508] workingset_activate 99
[ 1544.278659][T15508] workingset_nodereclaim 0
[ 1544.278659][T15508] pgrefill 1372
[ 1544.278659][T15508] pgscan 1516
[ 1544.278659][T15508] pgsteal 412
01:08:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:07 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:07 executing program 3:

01:08:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)

01:08:07 executing program 5:

[ 1544.372899][T15508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15504,uid=0
[ 1544.388731][T15508] Memory cgroup out of memory: Killed process 15508 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1544.409947][  T609] oom_reaper: reaped process 15508 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1544.638912][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1544.644947][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:08:07 executing program 3:

01:08:07 executing program 5:

01:08:07 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

01:08:07 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:08 executing program 3:

01:08:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:08 executing program 5:

[ 1544.969617][T15546] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1545.011730][T15546] CPU: 1 PID: 15546 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1545.020749][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1545.030917][T15546] Call Trace:
[ 1545.034581][T15546]  dump_stack+0x11d/0x181
[ 1545.038988][T15546]  dump_header+0xaa/0x39c
[ 1545.043371][T15546]  oom_kill_process.cold+0x10/0x15
[ 1545.048538][T15546]  out_of_memory+0x231/0xa60
[ 1545.053152][T15546]  mem_cgroup_out_of_memory+0x128/0x150
[ 1545.058716][T15546]  try_charge+0xb6c/0xbf0
[ 1545.063167][T15546]  ? rcu_note_context_switch+0x720/0x760
[ 1545.069358][T15546]  mem_cgroup_try_charge+0xd2/0x260
[ 1545.074667][T15546]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1545.080350][T15546]  wp_page_copy+0x322/0x1040
[ 1545.084956][T15546]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1545.090868][T15546]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1545.096803][T15546]  do_wp_page+0x192/0xeb0
[ 1545.102020][T15546]  ? __sanitizer_cov_trace_switch+0x49/0x80
01:08:08 executing program 5:

[ 1545.108080][T15546]  __handle_mm_fault+0x1d16/0x2e00
[ 1545.113297][T15546]  handle_mm_fault+0x21b/0x530
[ 1545.118110][T15546]  __do_page_fault+0x456/0x8d0
[ 1545.122932][T15546]  do_page_fault+0x38/0x194
[ 1545.127525][T15546]  page_fault+0x34/0x40
[ 1545.131983][T15546] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1545.138814][T15546] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1545.158519][T15546] RSP: 0018:ffffc9000341f9a0 EFLAGS: 00010206
[ 1545.164683][T15546] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000002e20
[ 1545.172915][T15546] RDX: 00000000000101d0 RSI: ffff88809f3ad498 RDI: 0000000020221000
[ 1545.180996][T15546] RBP: ffffc9000341f9d8 R08: ffff88809cb85000 R09: 000088809cb85b50
[ 1545.189069][T15546] R10: 0000000000000000 R11: 000088809cb85b57 R12: 0000000020213c50
[ 1545.197570][T15546] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1545.205706][T15546]  ? copyout+0xa5/0xb0
[ 1545.209921][T15546]  _copy_to_iter+0x170/0x9b0
[ 1545.214523][T15546]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1545.220804][T15546]  ? __virt_addr_valid+0x126/0x190
[ 1545.226095][T15546]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1545.232065][T15546]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1545.237913][T15546]  simple_copy_to_iter+0x5a/0x80
[ 1545.242924][T15546]  __skb_datagram_iter+0xa8/0x460
[ 1545.248003][T15546]  ? skb_copy_datagram_iter+0x170/0x170
[ 1545.253701][T15546]  ? apic_timer_interrupt+0xa/0x20
[ 1545.258826][T15546]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1545.265114][T15546]  skb_copy_datagram_iter+0x66/0x170
[ 1545.270409][T15546]  ? tipc_sk_send_ack+0x52/0x270
[ 1545.275383][T15546]  tipc_recvstream+0x29d/0x6c0
[ 1545.280182][T15546]  ? security_socket_recvmsg+0x92/0xb0
[ 1545.285650][T15546]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1545.290345][T15546]  sock_recvmsg+0x92/0xb0
[ 1545.294771][T15546]  ____sys_recvmsg+0x167/0x3a0
[ 1545.299879][T15546]  ___sys_recvmsg+0xb2/0x100
[ 1545.304523][T15546]  ? __fget_light+0xaf/0x190
[ 1545.309282][T15546]  ? __fdget+0x2c/0x40
[ 1545.313714][T15546]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1545.319969][T15546]  __sys_recvmsg+0x9d/0x160
[ 1545.324650][T15546]  __x64_sys_recvmsg+0x51/0x70
[ 1545.329435][T15546]  do_syscall_64+0xcc/0x3a0
[ 1545.334050][T15546]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1545.339946][T15546] RIP: 0033:0x45b349
[ 1545.343900][T15546] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
01:08:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1545.363563][T15546] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1545.371988][T15546] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1545.380213][T15546] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1545.388198][T15546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1545.396846][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1545.404846][T15546] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
01:08:08 executing program 3:

[ 1545.430471][T15546] memory: usage 307200kB, limit 307200kB, failcnt 6623
[ 1545.437383][T15546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1545.444706][T15546] Memory cgroup stats for /syz0:
[ 1545.444983][T15546] anon 242540544
[ 1545.444983][T15546] file 28672
[ 1545.444983][T15546] kernel_stack 6967296
[ 1545.444983][T15546] slab 9773056
[ 1545.444983][T15546] sock 0
[ 1545.444983][T15546] shmem 12288
[ 1545.444983][T15546] file_mapped 0
[ 1545.444983][T15546] file_dirty 0
[ 1545.444983][T15546] file_writeback 0
[ 1545.444983][T15546] anon_thp 205520896
[ 1545.444983][T15546] inactive_anon 0
[ 1545.444983][T15546] active_anon 242528256
[ 1545.444983][T15546] inactive_file 135168
[ 1545.444983][T15546] active_file 0
[ 1545.444983][T15546] unevictable 0
[ 1545.444983][T15546] slab_reclaimable 540672
[ 1545.444983][T15546] slab_unreclaimable 9232384
[ 1545.444983][T15546] pgfault 104082
[ 1545.444983][T15546] pgmajfault 0
[ 1545.444983][T15546] workingset_refault 99
[ 1545.444983][T15546] workingset_activate 99
[ 1545.444983][T15546] workingset_nodereclaim 0
[ 1545.444983][T15546] pgrefill 1405
[ 1545.444983][T15546] pgscan 1516
[ 1545.444983][T15546] pgsteal 412
[ 1545.610952][T15546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15545,uid=0
[ 1545.659921][T15546] Memory cgroup out of memory: Killed process 15546 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1545.747074][  T609] oom_reaper: reaped process 15546 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB
01:08:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)

01:08:09 executing program 5:

01:08:09 executing program 3:

01:08:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:09 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

01:08:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:09 executing program 5:

01:08:09 executing program 3:

01:08:09 executing program 5:

01:08:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:09 executing program 3:

[ 1546.314408][T15592] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1546.374360][T15592] CPU: 1 PID: 15592 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1546.383264][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1546.394079][T15592] Call Trace:
[ 1546.397524][T15592]  dump_stack+0x11d/0x181
[ 1546.401919][T15592]  dump_header+0xaa/0x39c
[ 1546.406288][T15592]  oom_kill_process.cold+0x10/0x15
[ 1546.411476][T15592]  out_of_memory+0x231/0xa60
[ 1546.416100][T15592]  mem_cgroup_out_of_memory+0x128/0x150
[ 1546.421675][T15592]  try_charge+0xb6c/0xbf0
[ 1546.426035][T15592]  ? rcu_note_context_switch+0x720/0x760
[ 1546.431730][T15592]  mem_cgroup_try_charge+0xd2/0x260
[ 1546.436955][T15592]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1546.442721][T15592]  wp_page_copy+0x322/0x1040
[ 1546.447380][T15592]  ? write_comp_data+0x1e/0x70
[ 1546.452178][T15592]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1546.457919][T15592]  do_wp_page+0x192/0xeb0
[ 1546.462272][T15592]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1546.468207][T15592]  __handle_mm_fault+0x1d16/0x2e00
[ 1546.473466][T15592]  handle_mm_fault+0x21b/0x530
[ 1546.478259][T15592]  __do_page_fault+0x456/0x8d0
[ 1546.483149][T15592]  do_page_fault+0x38/0x194
[ 1546.487663][T15592]  page_fault+0x34/0x40
[ 1546.491951][T15592] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1546.498868][T15592] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1546.518601][T15592] RSP: 0018:ffffc900036839a0 EFLAGS: 00010206
[ 1546.524718][T15592] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000002e20
[ 1546.532856][T15592] RDX: 00000000000101d0 RSI: ffff88809f3ad498 RDI: 0000000020221000
[ 1546.541080][T15592] RBP: ffffc900036839d8 R08: ffff8880573760c0 R09: 0000888057376c10
[ 1546.549051][T15592] R10: 0000000000000000 R11: 0000888057376c17 R12: 0000000020213c50
[ 1546.557075][T15592] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1546.565071][T15592]  ? copyout+0xa5/0xb0
[ 1546.569181][T15592]  _copy_to_iter+0x170/0x9b0
[ 1546.573822][T15592]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1546.580064][T15592]  ? __virt_addr_valid+0x126/0x190
[ 1546.585179][T15592]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1546.591209][T15592]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1546.596998][T15592]  simple_copy_to_iter+0x5a/0x80
[ 1546.601939][T15592]  __skb_datagram_iter+0xa8/0x460
[ 1546.607030][T15592]  ? skb_copy_datagram_iter+0x170/0x170
[ 1546.612820][T15592]  ? remove_wait_queue+0x54/0x60
[ 1546.617972][T15592]  skb_copy_datagram_iter+0x66/0x170
[ 1546.623274][T15592]  tipc_recvstream+0x29d/0x6c0
[ 1546.628189][T15592]  ? security_socket_recvmsg+0x92/0xb0
[ 1546.633927][T15592]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1546.639126][T15592]  sock_recvmsg+0x92/0xb0
[ 1546.643495][T15592]  ____sys_recvmsg+0x167/0x3a0
[ 1546.648376][T15592]  ___sys_recvmsg+0xb2/0x100
[ 1546.653057][T15592]  ? __fget_light+0xaf/0x190
[ 1546.657808][T15592]  ? __fdget+0x2c/0x40
[ 1546.661994][T15592]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1546.668523][T15592]  __sys_recvmsg+0x9d/0x160
[ 1546.673078][T15592]  __x64_sys_recvmsg+0x51/0x70
[ 1546.677877][T15592]  do_syscall_64+0xcc/0x3a0
[ 1546.682571][T15592]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1546.688489][T15592] RIP: 0033:0x45b349
[ 1546.692487][T15592] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1546.712468][T15592] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1546.720984][T15592] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1546.729917][T15592] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1546.738117][T15592] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1546.746313][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1546.754359][T15592] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1546.767157][T15592] memory: usage 307200kB, limit 307200kB, failcnt 6648
[ 1546.774464][T15592] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1546.781602][T15592] Memory cgroup stats for /syz0:
[ 1546.781860][T15592] anon 242425856
[ 1546.781860][T15592] file 28672
[ 1546.781860][T15592] kernel_stack 6967296
[ 1546.781860][T15592] slab 9773056
[ 1546.781860][T15592] sock 0
[ 1546.781860][T15592] shmem 12288
[ 1546.781860][T15592] file_mapped 0
[ 1546.781860][T15592] file_dirty 0
[ 1546.781860][T15592] file_writeback 0
[ 1546.781860][T15592] anon_thp 205520896
[ 1546.781860][T15592] inactive_anon 0
[ 1546.781860][T15592] active_anon 242425856
[ 1546.781860][T15592] inactive_file 135168
[ 1546.781860][T15592] active_file 0
[ 1546.781860][T15592] unevictable 0
[ 1546.781860][T15592] slab_reclaimable 540672
[ 1546.781860][T15592] slab_unreclaimable 9232384
[ 1546.781860][T15592] pgfault 104181
[ 1546.781860][T15592] pgmajfault 0
[ 1546.781860][T15592] workingset_refault 99
[ 1546.781860][T15592] workingset_activate 99
[ 1546.781860][T15592] workingset_nodereclaim 0
[ 1546.781860][T15592] pgrefill 1405
[ 1546.781860][T15592] pgscan 1516
[ 1546.781860][T15592] pgsteal 412
[ 1546.923510][T15592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15587,uid=0
[ 1546.939249][T15592] Memory cgroup out of memory: Killed process 15592 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
01:08:10 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:10 executing program 5:

01:08:10 executing program 3:

01:08:10 executing program 1:
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

01:08:10 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1546.996309][  T609] oom_reaper: reaped process 15592 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB
01:08:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:10 executing program 5:

01:08:10 executing program 3:

01:08:10 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:10 executing program 3:

01:08:10 executing program 5:

01:08:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1547.598145][T15631] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1547.649126][T15631] CPU: 0 PID: 15631 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1547.657840][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1547.667899][T15631] Call Trace:
[ 1547.671399][T15631]  dump_stack+0x11d/0x181
[ 1547.675775][T15631]  dump_header+0xaa/0x39c
[ 1547.680155][T15631]  oom_kill_process.cold+0x10/0x15
[ 1547.685292][T15631]  out_of_memory+0x231/0xa60
[ 1547.690429][T15631]  mem_cgroup_out_of_memory+0x128/0x150
[ 1547.696214][T15631]  try_charge+0xb6c/0xbf0
[ 1547.700739][T15631]  ? rcu_note_context_switch+0x720/0x760
[ 1547.706404][T15631]  mem_cgroup_try_charge+0xd2/0x260
[ 1547.711680][T15631]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1547.717482][T15631]  wp_page_copy+0x322/0x1040
[ 1547.722088][T15631]  ? __schedule+0x30e/0x690
[ 1547.726638][T15631]  ? preempt_schedule_irq+0x72/0x90
[ 1547.732018][T15631]  ? retint_kernel+0x1b/0x1b
[ 1547.736741][T15631]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1547.742480][T15631]  do_wp_page+0x192/0xeb0
[ 1547.747405][T15631]  ? __handle_mm_fault+0x679/0x2e00
[ 1547.752618][T15631]  ? write_comp_data+0x9/0x70
[ 1547.757320][T15631]  __handle_mm_fault+0x1d16/0x2e00
[ 1547.762458][T15631]  handle_mm_fault+0x21b/0x530
[ 1547.767302][T15631]  __do_page_fault+0x456/0x8d0
[ 1547.772109][T15631]  do_page_fault+0x38/0x194
[ 1547.776632][T15631]  page_fault+0x34/0x40
[ 1547.780964][T15631] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1547.787632][T15631] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1547.808345][T15631] RSP: 0018:ffffc9000362f9a0 EFLAGS: 00010206
[ 1547.814445][T15631] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000002e20
[ 1547.822489][T15631] RDX: 00000000000101d0 RSI: ffff88809f3ad498 RDI: 0000000020221000
[ 1547.830476][T15631] RBP: ffffc9000362f9d8 R08: ffff888052038000 R09: 0000888052038b50
[ 1547.838895][T15631] R10: 0000000000000000 R11: 0000888052038b57 R12: 0000000020213c50
[ 1547.847187][T15631] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1547.855385][T15631]  ? copyout+0xa5/0xb0
[ 1547.859580][T15631]  _copy_to_iter+0x170/0x9b0
[ 1547.864362][T15631]  ? __read_once_size.constprop.0+0x16/0x20
[ 1547.870451][T15631]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1547.876377][T15631]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1547.882101][T15631]  simple_copy_to_iter+0x5a/0x80
[ 1547.887076][T15631]  __skb_datagram_iter+0xa8/0x460
[ 1547.892114][T15631]  ? skb_copy_datagram_iter+0x170/0x170
[ 1547.897785][T15631]  ? tipc_node_xmit_skb+0x112/0x140
[ 1547.903078][T15631]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1547.909325][T15631]  skb_copy_datagram_iter+0x66/0x170
[ 1547.914662][T15631]  tipc_recvstream+0x29d/0x6c0
[ 1547.919426][T15631]  ? security_socket_recvmsg+0x92/0xb0
[ 1547.924957][T15631]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1547.929635][T15631]  sock_recvmsg+0x92/0xb0
[ 1547.933966][T15631]  ____sys_recvmsg+0x167/0x3a0
[ 1547.938743][T15631]  ___sys_recvmsg+0xb2/0x100
[ 1547.943340][T15631]  ? __fget_light+0xaf/0x190
[ 1547.947922][T15631]  ? __fdget+0x2c/0x40
[ 1547.951987][T15631]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1547.958275][T15631]  __sys_recvmsg+0x9d/0x160
[ 1547.962961][T15631]  __x64_sys_recvmsg+0x51/0x70
[ 1547.967891][T15631]  do_syscall_64+0xcc/0x3a0
[ 1547.972401][T15631]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1547.978322][T15631] RIP: 0033:0x45b349
[ 1547.982279][T15631] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1548.002042][T15631] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1548.010454][T15631] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1548.018430][T15631] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1548.026546][T15631] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1548.034525][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1548.042518][T15631] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1548.063250][T15631] memory: usage 307200kB, limit 307200kB, failcnt 6693
[ 1548.070443][T15631] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1548.077333][T15631] Memory cgroup stats for /syz0:
[ 1548.077429][T15631] anon 242540544
[ 1548.077429][T15631] file 28672
[ 1548.077429][T15631] kernel_stack 6967296
[ 1548.077429][T15631] slab 9773056
[ 1548.077429][T15631] sock 0
[ 1548.077429][T15631] shmem 12288
[ 1548.077429][T15631] file_mapped 0
[ 1548.077429][T15631] file_dirty 0
[ 1548.077429][T15631] file_writeback 0
[ 1548.077429][T15631] anon_thp 205520896
[ 1548.077429][T15631] inactive_anon 0
[ 1548.077429][T15631] active_anon 242540544
[ 1548.077429][T15631] inactive_file 135168
[ 1548.077429][T15631] active_file 0
[ 1548.077429][T15631] unevictable 0
[ 1548.077429][T15631] slab_reclaimable 540672
[ 1548.077429][T15631] slab_unreclaimable 9232384
[ 1548.077429][T15631] pgfault 104313
[ 1548.077429][T15631] pgmajfault 0
[ 1548.077429][T15631] workingset_refault 99
[ 1548.077429][T15631] workingset_activate 99
[ 1548.077429][T15631] workingset_nodereclaim 0
[ 1548.077429][T15631] pgrefill 1405
[ 1548.077429][T15631] pgscan 1516
[ 1548.077429][T15631] pgsteal 412
[ 1548.178673][    C1] net_ratelimit: 14 callbacks suppressed
[ 1548.178684][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1548.190126][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1548.194858][T15631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15627,uid=0
01:08:11 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:11 executing program 3:

01:08:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:11 executing program 5:

01:08:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:11 executing program 1:

[ 1548.211395][T15631] Memory cgroup out of memory: Killed process 15631 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1548.238680][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1548.244458][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:08:11 executing program 3:

01:08:11 executing program 5:

01:08:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:11 executing program 1:

01:08:11 executing program 3:

[ 1548.798669][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1548.804490][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1548.869277][T15667] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1548.907081][T15667] CPU: 1 PID: 15667 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1548.916049][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1548.926114][T15667] Call Trace:
[ 1548.929417][T15667]  dump_stack+0x11d/0x181
[ 1548.933825][T15667]  dump_header+0xaa/0x39c
[ 1548.938258][T15667]  oom_kill_process.cold+0x10/0x15
[ 1548.943442][T15667]  out_of_memory+0x231/0xa60
[ 1548.948294][T15667]  mem_cgroup_out_of_memory+0x128/0x150
[ 1548.953986][T15667]  try_charge+0xb6c/0xbf0
[ 1548.958341][T15667]  ? rcu_note_context_switch+0x720/0x760
[ 1548.964000][T15667]  mem_cgroup_try_charge+0xd2/0x260
[ 1548.969416][T15667]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1548.975122][T15667]  wp_page_copy+0x322/0x1040
[ 1548.979736][T15667]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1548.985660][T15667]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1548.991398][T15667]  do_wp_page+0x192/0xeb0
[ 1548.995751][T15667]  ? __read_once_size+0x41/0xe0
[ 1549.000648][T15667]  __handle_mm_fault+0x1d16/0x2e00
[ 1549.005794][T15667]  handle_mm_fault+0x21b/0x530
[ 1549.010667][T15667]  __do_page_fault+0x456/0x8d0
[ 1549.015579][T15667]  do_page_fault+0x38/0x194
[ 1549.020110][T15667]  page_fault+0x34/0x40
[ 1549.024426][T15667] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1549.031039][T15667] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1549.050671][T15667] RSP: 0018:ffffc900036979a0 EFLAGS: 00010206
[ 1549.056735][T15667] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000002e20
[ 1549.064699][T15667] RDX: 00000000000101d0 RSI: ffff88809e5ed498 RDI: 0000000020221000
[ 1549.072694][T15667] RBP: ffffc900036979d8 R08: ffff88805d4d6080 R09: 000088805d4d6bd0
[ 1549.080712][T15667] R10: 0000000000000000 R11: 000088805d4d6bd7 R12: 0000000020213c50
[ 1549.088747][T15667] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1549.096908][T15667]  ? copyout+0xa5/0xb0
[ 1549.101028][T15667]  _copy_to_iter+0x170/0x9b0
[ 1549.105641][T15667]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1549.112022][T15667]  ? __virt_addr_valid+0x126/0x190
[ 1549.117130][T15667]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1549.118702][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1549.123028][T15667]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1549.128788][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1549.134574][T15667]  simple_copy_to_iter+0x5a/0x80
[ 1549.145288][T15667]  __skb_datagram_iter+0xa8/0x460
[ 1549.150462][T15667]  ? skb_copy_datagram_iter+0x170/0x170
[ 1549.156014][T15667]  ? tipc_node_xmit_skb+0x112/0x140
[ 1549.161229][T15667]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1549.167714][T15667]  skb_copy_datagram_iter+0x66/0x170
[ 1549.173003][T15667]  tipc_recvstream+0x29d/0x6c0
[ 1549.177822][T15667]  ? security_socket_recvmsg+0x92/0xb0
[ 1549.183277][T15667]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1549.188467][T15667]  sock_recvmsg+0x92/0xb0
[ 1549.192800][T15667]  ____sys_recvmsg+0x167/0x3a0
[ 1549.197571][T15667]  ___sys_recvmsg+0xb2/0x100
[ 1549.202226][T15667]  ? apic_timer_interrupt+0xa/0x20
[ 1549.207397][T15667]  ? sockfd_lookup_light+0xa4/0x100
[ 1549.212598][T15667]  __sys_recvmsg+0x9d/0x160
[ 1549.217097][T15667]  __x64_sys_recvmsg+0x51/0x70
[ 1549.222066][T15667]  do_syscall_64+0xcc/0x3a0
[ 1549.226580][T15667]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1549.232479][T15667] RIP: 0033:0x45b349
[ 1549.236465][T15667] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1549.256458][T15667] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1549.265148][T15667] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1549.273250][T15667] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1549.281422][T15667] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1549.289455][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1549.297691][T15667] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1549.311537][T15667] memory: usage 307152kB, limit 307200kB, failcnt 6935
[ 1549.318911][T15667] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1549.326167][T15667] Memory cgroup stats for /syz0:
[ 1549.326443][T15667] anon 242540544
[ 1549.326443][T15667] file 28672
[ 1549.326443][T15667] kernel_stack 6930432
[ 1549.326443][T15667] slab 9773056
[ 1549.326443][T15667] sock 0
[ 1549.326443][T15667] shmem 12288
[ 1549.326443][T15667] file_mapped 0
[ 1549.326443][T15667] file_dirty 0
[ 1549.326443][T15667] file_writeback 0
[ 1549.326443][T15667] anon_thp 205520896
[ 1549.326443][T15667] inactive_anon 0
[ 1549.326443][T15667] active_anon 242610176
[ 1549.326443][T15667] inactive_file 135168
[ 1549.326443][T15667] active_file 0
[ 1549.326443][T15667] unevictable 0
[ 1549.326443][T15667] slab_reclaimable 540672
[ 1549.326443][T15667] slab_unreclaimable 9232384
[ 1549.326443][T15667] pgfault 104511
[ 1549.326443][T15667] pgmajfault 0
[ 1549.326443][T15667] workingset_refault 99
[ 1549.326443][T15667] workingset_activate 99
[ 1549.326443][T15667] workingset_nodereclaim 0
[ 1549.326443][T15667] pgrefill 1438
[ 1549.326443][T15667] pgscan 1549
[ 1549.326443][T15667] pgsteal 412
[ 1549.422317][T15667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15665,uid=0
[ 1549.438157][T15667] Memory cgroup out of memory: Killed process 15667 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
[ 1549.438741][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1549.458219][  T609] oom_reaper: reaped process 15667 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB
01:08:12 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:12 executing program 5:

01:08:12 executing program 1:

01:08:12 executing program 3:

01:08:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb7df}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

[ 1549.461825][    C0] protocol 88fb is buggy, dev hsr_slave_1
01:08:12 executing program 3:

01:08:12 executing program 1:

01:08:12 executing program 5:

01:08:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)

01:08:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:13 executing program 3:

[ 1550.032318][T15703] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1550.145840][T15703] CPU: 0 PID: 15703 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1550.154585][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1550.164656][T15703] Call Trace:
[ 1550.167959][T15703]  dump_stack+0x11d/0x181
[ 1550.172308][T15703]  dump_header+0xaa/0x39c
[ 1550.176660][T15703]  oom_kill_process.cold+0x10/0x15
[ 1550.181834][T15703]  ? out_of_memory+0x1c5/0xa60
[ 1550.186624][T15703]  out_of_memory+0x231/0xa60
[ 1550.191243][T15703]  mem_cgroup_out_of_memory+0x128/0x150
[ 1550.196950][T15703]  try_charge+0xb6c/0xbf0
[ 1550.201337][T15703]  ? rcu_note_context_switch+0x720/0x760
[ 1550.206997][T15703]  mem_cgroup_try_charge+0xd2/0x260
[ 1550.212235][T15703]  mem_cgroup_try_charge_delay+0x3a/0x80
[ 1550.217879][T15703]  wp_page_copy+0x322/0x1040
[ 1550.222925][T15703]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1550.228847][T15703]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1550.234587][T15703]  do_wp_page+0x192/0xeb0
[ 1550.238935][T15703]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1550.244855][T15703]  __handle_mm_fault+0x1d16/0x2e00
[ 1550.250083][T15703]  handle_mm_fault+0x21b/0x530
[ 1550.254873][T15703]  __do_page_fault+0x456/0x8d0
[ 1550.259669][T15703]  do_page_fault+0x38/0x194
[ 1550.264203][T15703]  page_fault+0x34/0x40
[ 1550.268430][T15703] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 1550.275089][T15703] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1550.294855][T15703] RSP: 0018:ffffc900042179a0 EFLAGS: 00010206
[ 1550.300935][T15703] RAX: 0000000000040000 RBX: 00000000000101d0 RCX: 0000000000004e20
[ 1550.308920][T15703] RDX: 00000000000101d0 RSI: ffff88809e7cb498 RDI: 000000002021f000
[ 1550.317918][T15703] RBP: ffffc900042179d8 R08: ffff8880573760c0 R09: 0000888057376c10
[ 1550.325932][T15703] R10: 0000000000000000 R11: 0000888057376c17 R12: 0000000020213c50
[ 1550.333951][T15703] R13: 0000000020223e20 R14: 0000000000000000 R15: 00007ffffffff000
[ 1550.342038][T15703]  ? copyout+0xa5/0xb0
[ 1550.346188][T15703]  _copy_to_iter+0x170/0x9b0
[ 1550.350831][T15703]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1550.357217][T15703]  ? __virt_addr_valid+0x126/0x190
[ 1550.362423][T15703]  ? constant_test_bit.constprop.0+0xd/0x20
[ 1550.368331][T15703]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1550.374099][T15703]  simple_copy_to_iter+0x5a/0x80
[ 1550.379178][T15703]  __skb_datagram_iter+0xa8/0x460
[ 1550.384293][T15703]  ? skb_copy_datagram_iter+0x170/0x170
[ 1550.389955][T15703]  ? remove_wait_queue+0x54/0x60
[ 1550.395040][T15703]  skb_copy_datagram_iter+0x66/0x170
[ 1550.400611][T15703]  tipc_recvstream+0x29d/0x6c0
[ 1550.405401][T15703]  ? security_socket_recvmsg+0x92/0xb0
[ 1550.410875][T15703]  ? tipc_recvmsg+0x7e0/0x7e0
[ 1550.415633][T15703]  sock_recvmsg+0x92/0xb0
[ 1550.420073][T15703]  ____sys_recvmsg+0x167/0x3a0
[ 1550.424878][T15703]  ___sys_recvmsg+0xb2/0x100
[ 1550.429486][T15703]  ? __fget_light+0xaf/0x190
[ 1550.434100][T15703]  ? __fdget+0x2c/0x40
[ 1550.438269][T15703]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1550.444531][T15703]  __sys_recvmsg+0x9d/0x160
[ 1550.449134][T15703]  __x64_sys_recvmsg+0x51/0x70
[ 1550.453921][T15703]  do_syscall_64+0xcc/0x3a0
[ 1550.458477][T15703]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1550.464724][T15703] RIP: 0033:0x45b349
[ 1550.468642][T15703] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1550.488358][T15703] RSP: 002b:00007f621e5d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1550.496850][T15703] RAX: ffffffffffffffda RBX: 00007f621e5d96d4 RCX: 000000000045b349
[ 1550.504930][T15703] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004
[ 1550.513071][T15703] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1550.521737][T15703] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1550.529925][T15703] R13: 0000000000000895 R14: 00000000004c9f6d R15: 000000000075bf2c
[ 1550.553278][T15703] memory: usage 307152kB, limit 307200kB, failcnt 6960
[ 1550.562423][T15703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1550.569322][T15703] Memory cgroup stats for /syz0:
[ 1550.569600][T15703] anon 242540544
[ 1550.569600][T15703] file 28672
[ 1550.569600][T15703] kernel_stack 6930432
[ 1550.569600][T15703] slab 9773056
[ 1550.569600][T15703] sock 0
[ 1550.569600][T15703] shmem 12288
[ 1550.569600][T15703] file_mapped 0
[ 1550.569600][T15703] file_dirty 0
[ 1550.569600][T15703] file_writeback 0
[ 1550.569600][T15703] anon_thp 205520896
[ 1550.569600][T15703] inactive_anon 0
[ 1550.569600][T15703] active_anon 242610176
[ 1550.569600][T15703] inactive_file 135168
[ 1550.569600][T15703] active_file 0
[ 1550.569600][T15703] unevictable 0
[ 1550.569600][T15703] slab_reclaimable 540672
[ 1550.569600][T15703] slab_unreclaimable 9232384
[ 1550.569600][T15703] pgfault 104742
[ 1550.569600][T15703] pgmajfault 0
[ 1550.569600][T15703] workingset_refault 99
[ 1550.569600][T15703] workingset_activate 99
[ 1550.569600][T15703] workingset_nodereclaim 0
[ 1550.569600][T15703] pgrefill 1438
[ 1550.569600][T15703] pgscan 1549
[ 1550.569600][T15703] pgsteal 412
[ 1550.663904][T15703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15698,uid=0
[ 1550.679829][T15703] Memory cgroup out of memory: Killed process 15703 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000
01:08:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, 0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

01:08:13 executing program 5:

01:08:13 executing program 1:

01:08:13 executing program 3:

01:08:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:08:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0)

[ 1550.700317][  T609] oom_reaper: reaped process 15703 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB
[ 1550.838587][T15730] ==================================================================
[ 1550.846744][T15730] BUG: KCSAN: data-race in iomap_dio_bio_actor / iomap_dio_bio_end_io
[ 1550.855017][T15730] 
[ 1550.857350][T15730] read to 0xffff888053923ba4 of 4 bytes by interrupt on cpu 1:
[ 1550.864911][T15730]  iomap_dio_bio_end_io+0x4c/0x2b0
[ 1550.870033][T15730]  bio_endio+0x2fa/0x400
[ 1550.874298][T15730]  blk_update_request+0x427/0x7b0
[ 1550.879338][T15730]  scsi_end_request+0x6b/0x360
[ 1550.884114][T15730]  scsi_io_completion+0x11d/0xc80
[ 1550.889148][T15730]  scsi_finish_command+0x283/0x380
[ 1550.894399][T15730]  scsi_softirq_done+0x259/0x280
[ 1550.899347][T15730]  blk_done_softirq+0x1eb/0x250
[ 1550.904217][T15730]  __do_softirq+0x115/0x33f
[ 1550.908744][T15730]  irq_exit+0xbb/0xe0
[ 1550.912734][T15730]  do_IRQ+0x81/0x130
[ 1550.916642][T15730]  ret_from_intr+0x0/0x21
[ 1550.921002][T15730]  kcsan_setup_watchpoint+0x1d4/0x460
[ 1550.926387][T15730]  __tsan_read8+0xc6/0x100
[ 1550.930817][T15730]  free_pages_and_swap_cache+0x7f/0x2a0
[ 1550.936372][T15730]  tlb_flush_mmu+0x72/0x3b0
[ 1550.940884][T15730]  tlb_finish_mmu+0x80/0x250
[ 1550.945489][T15730]  exit_mmap+0x166/0x300
[ 1550.949785][T15730]  mmput+0xea/0x280
[ 1550.953607][T15730]  do_exit+0x4ac/0x18c0
[ 1550.957760][T15730]  do_group_exit+0xb4/0x1c0
[ 1550.962385][T15730]  __x64_sys_exit_group+0x2e/0x30
[ 1550.967467][T15730]  do_syscall_64+0xcc/0x3a0
[ 1550.971997][T15730]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1550.977885][T15730] 
[ 1550.980217][T15730] write to 0xffff888053923ba4 of 4 bytes by task 15730 on cpu 0:
[ 1550.988058][T15730]  iomap_dio_bio_actor+0x6dc/0x960
[ 1550.993220][T15730]  iomap_dio_actor+0x87/0x3a0
[ 1550.997949][T15730]  iomap_apply+0x20d/0x6a0
[ 1551.002496][T15730]  iomap_dio_rw+0x67e/0x9a0
[ 1551.007014][T15730]  ext4_file_write_iter+0xc38/0xd40
[ 1551.012244][T15730]  new_sync_write+0x388/0x4a0
[ 1551.016923][T15730]  __vfs_write+0xb1/0xc0
[ 1551.021182][T15730]  vfs_write+0x18a/0x390
[ 1551.025440][T15730]  ksys_write+0xd5/0x1b0
[ 1551.031265][T15730]  __x64_sys_write+0x4c/0x60
[ 1551.035875][T15730]  do_syscall_64+0xcc/0x3a0
[ 1551.040418][T15730]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1551.046307][T15730] 
[ 1551.048786][T15730] Reported by Kernel Concurrency Sanitizer on:
[ 1551.054952][T15730] CPU: 0 PID: 15730 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1551.063621][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1551.073691][T15730] ==================================================================
[ 1551.081802][T15730] Kernel panic - not syncing: panic_on_warn set ...
[ 1551.088408][T15730] CPU: 0 PID: 15730 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1551.097228][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1551.107394][T15730] Call Trace:
[ 1551.110677][T15730]  dump_stack+0x11d/0x181
[ 1551.115003][T15730]  panic+0x210/0x640
[ 1551.118890][T15730]  ? vprintk_func+0x8d/0x140
[ 1551.123484][T15730]  kcsan_report.cold+0xc/0xd
[ 1551.128176][T15730]  kcsan_setup_watchpoint+0x3fe/0x460
[ 1551.133552][T15730]  __tsan_unaligned_write4+0xc7/0x110
[ 1551.138945][T15730]  iomap_dio_bio_actor+0x6dc/0x960
[ 1551.144061][T15730]  iomap_dio_actor+0x87/0x3a0
[ 1551.148748][T15730]  iomap_apply+0x20d/0x6a0
[ 1551.153155][T15730]  ? iomap_dio_bio_actor+0x960/0x960
[ 1551.158438][T15730]  iomap_dio_rw+0x67e/0x9a0
[ 1551.163034][T15730]  ? iomap_dio_bio_actor+0x960/0x960
[ 1551.168432][T15730]  ? preempt_count_add+0x48/0xb0
[ 1551.173385][T15730]  ext4_file_write_iter+0xc38/0xd40
[ 1551.178602][T15730]  ? ext4_file_write_iter+0xc38/0xd40
[ 1551.184078][T15730]  ? iov_iter_init+0xe2/0x120
[ 1551.188771][T15730]  new_sync_write+0x388/0x4a0
[ 1551.193472][T15730]  __vfs_write+0xb1/0xc0
[ 1551.197712][T15730]  vfs_write+0x18a/0x390
[ 1551.201954][T15730]  ksys_write+0xd5/0x1b0
[ 1551.206194][T15730]  __x64_sys_write+0x4c/0x60
[ 1551.210853][T15730]  do_syscall_64+0xcc/0x3a0
[ 1551.215374][T15730]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1551.221427][T15730] RIP: 0033:0x45b349
[ 1551.225499][T15730] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1551.245099][T15730] RSP: 002b:00007efe742c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1551.253642][T15730] RAX: ffffffffffffffda RBX: 00007efe742c36d4 RCX: 000000000045b349
[ 1551.261737][T15730] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000004
[ 1551.269953][T15730] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1551.278051][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1551.286186][T15730] R13: 0000000000000ca5 R14: 00000000004cd7e2 R15: 000000000075bf2c
[ 1551.296074][T15730] Kernel Offset: disabled
[ 1551.300411][T15730] Rebooting in 86400 seconds..