8066ef92706adf7b221a597481e9fe92ddbd5992c8d266070bba245cc82f00947d11393c9281f963679dcbcf65d5d0539e56ee0b8d01a2f55e23757a9e542f1803a8c519148d74df005b5c08623d3a42ab98245e4e7f45c4a0cdfaee7315043ad520656ea0dea50de1fcef6d6c4d373f41d9a9810a8e842fbea741d6cd58ec3a0a0169cf19daf4f0619af60d9a2fbc91efb795cc70514d489f1149a9759814889991b25d1466f37264130f7039ef6e8d1727d7c4ccb6bf9ad97bbbaefb52d8d0dec861c359d857f3254add4c6d89bcfa78ee1eeaa96fdbe0fd5199077d22ee50f9580eb54544be77cebfac309a5a5ee69e90bb915116808f782100a76cb0f4488712f7296784307f14086d8d84b4e9159d4d55f231cd876e2d29e78948fd23525c9922da67f57384aea0a14d0e210b3ea1ff3ce76ec2bf3c3aeee0c4163400ee8a3ea91670bd6ff1b96d3c504ca03a6be0677c35986708d348e755259c9ae6a444cf0dd53e5ed24536f64a0e67ff0cd628df38606d413be459269c59e70292e54f2d6d3e3c5b4f5634a1b26257b4576987b8b0e484b7460800cf4e7ac87ec3c72e81bb89baeb969005969e6ec076ff03fdc20c8aac9ae38d7dd1611ba9701ac49ea4ab6a06c0f90ecfa97afeeab7148820aa9ee514f6acfb82bd577ee80180955326473f217cdc1726ac58ffbdfdce7606f56829b4913ca9b687e6c67024af01fa43f8ced5a60a66fa6c209d43a4c1977fa48eb5338eb0c5f04cb4da2dd991965e2264e6911b755897dffc69b12c958207411e37a920df10ca259e5f3ac69ec2e1fa76dd34f00fde366cd6367b23f58dd3bfa89b7cacb9c3299cffc3267778cad2cff9fc9077e23aed925bd71f9b3db461ae61d6b79455ddff6b43123d689389f7621bdae266a4938214e6023fc756314c3d28ea4fef409d89aa2c50b686cc5b025cd1c562099656635cd7b0b802c16f6f52d009f8f0a0375df0850183c4b1d4345330ad595198d58a5d4edd58e0af5c9e3825b5f89ae0b7a611804847c6e12e898a79a8b009e70e9678bae1aea4a3605cf8e2b7807ec57b287055de97d2866817c9428c90b803a0bcb5f820b5deb1c629d218b5759540d3d2a60b1bf01c85905fe167e88d8b81e610dd892263eac41a847d0d0e467cfc62aa20e7799caf7d9eea05f6638c6798add0666638a989ad2d539d8bd7e3c57f780f371442e76f6c7c90cad9002fbd2bddcb872a74781f9d060828b23bca27d60f54d51ba4d442ed8a5d8478c9dc3b19048e90a851333897357924497aada192ef8262d90c4630b5d06ff553a997bfe10a0ab60a68f0f0e2bcc28e826a3c7adcef3db882645b9ea7162e6d381e58db45e72da80eed0080aaeaa37cc39dfe9545e1fc16b735dffbd5fe8a0b76620137e125696873e7fcaf2078d73a7f0e6ff611f7ddd4e38360626bd1f21882ada3170edb11c6df164586e6743a1443ff17743581722dd1a190c0a3407ac53c1f866e94008d5d94f5d30494a64afec68cef2a870493684c7133e4702730cbac3e8b2284231f0320a5775b258484423fbaf4b9015f25c73cd66d589b97715c5c618dee3c69d42fd457f7a8f6ec112f700c9ee0831c2a8061585e09a5eb286d0f53473f706def513edcd169d4e4db7bbc21eabb4be33a2cffd317c1fb892ffff18e6aad7fd94c689944203bbe89900890c05651730a96fa7920e079bbc57ccc8b22e21ea5ba71999fa20f894308b49043ffa2beb9355270ba3c55940a924cbf47a5f4a328c806e228e6fd362d222bb2f5b65151d56acf85b92a6ec8fa32d5b8ffd108064c8554a5859b8621c1cb34c2128b9e535e6cdb96c852db076b2ad76ac1ad50a059bfeec0fb2a92402d3188a08b34aa77264a120d95ecccb4232e30c4a78696c6391d8d5e59fb15e754dd2013833cbd409dbca364d1b877fdc33d4dd6cec0630859be052df7e2b51f1eb5698a11d1f6cec21f0fef4bd4647d4956cd89080d9810c693e9b3a2c53322143a58356b55c043922a9ec6dadb8c4f08befac1ef488983592c599055996cb4ef5f16bbc7d553ea258f1050ab80b38ca85f447918b07d723f3e81c17ee1307d7fb3fe3ef8454ab82e0a8f9d3e63f4fd13a08d3d5a102acbb337d5fac1ed74fcd983c69639e5479782ab3aefee6f27a3169d178f6c9d66325be020d9feba2b5185ccc158233c4bd4e58a4dd719e13a2d37f0387ce06b56e44a8c04da83d8e375f20e979b08b032a68245d695f6db26683eb74cff029c6c9b9c8fa285f5928bfd3d0a58afc3077ca8ce16f260d1ca5d81b946e5a2b12653bc2baf73727b274f6e71fd5191c5d644a889dbdbd6df98b3585f897aa5a998409acf4f6ca4d51ed9091384458405e7381f256a0c3624e6b9a35944f60463f6785476a13dcf6c4236b1c38d013a7cd3f19ad28ef38676b2e1f85c60ab731d45c38043f9aef4a89339ba68c98ec485a790f09e59bee319ccfae658a820fd924f74cb260d5bce6a0fddc9d1ef1c496f44db76aeed54c5dde9af6075f973b824a492c770df03d4340e9ae62ca695b84fb2eee93cf2ea99fadf23d71702895c7b055af19f5713dd89196a8d35fc807c6c832a00199cfcbf16d97cfe183ecdef410d636b7e99380f8ce411438a6a6a32b563fe42066c055bb0545b862002b35870cb1dc92e12cc780c57ec1f4cfe19082e5f89a228f7464bd5563eaa895958134f2676ae68689cd70161d8e099e82a05da540f66e4e15cf28191d30c275448ed0aacbd713ca2b866214ace0e8089688941114706111a160f87e43ff9ef1163c00aefdc5b48e7bceb792bd200adc5eabd451414859f53e8fac91d007301265286d21dc86794880d61b85cff0f10b0dd9c53529316e5c4d426a9f65ee688dca0fb81f8d834a2f88dba6f4aae9ebf8cb54b9d788eb846812fbf54e78b4345712fa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={{0x0, 0x3, 0x1f, 0x7, 0x1, 0x1}, 0x8, 0x1, 0x6}) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r3 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000100)={0x4, 0x5, 0x36, "25e29ed7488839c4d2d961b5f92d9a98acd6ce603e3683b47051d97eac5c74fc93321d09954e8b8768edb6a1afd758bb99b1b172d77d454a6bc14904", 0x2d, "5dc71535d5ebc93cb68a3084008cf2d6eb08f826b9f828fbb73545da95771db8f32beec5fe4f37ba1592c11411b292ee5b499720ceb7fdf79492efdc", 0xb0}) sendmmsg$alg(r3, 0x0, 0x0, 0x4080044) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/243) 15:18:27 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:18:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400283}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800be001e1bc4140fcfd8755778135bb3640f409cb61a3b5c23446f0cb421246516b2703b817942df27a96fc17dd810ae1c40ae8783d98db703b2b45982d63446b49254ffdf1d577617160adb9d152e4568bdf6c872d9208873c003d469ecaed8c3324bea08539cd8b2a1727d4ec1537a4bf6549f11c0c1ae435253fcbbfc8f1047a12df4d4f100594fd2ac4a560000000000000074525f8f255d5be28acc00000000000000", @ANYRES16=r5, @ANYBLOB="2c0428bd7000ffdbdf25010000000000000009410000004c00180000000565746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x51) 15:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)=""/13, &(0x7f0000000180)=0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x400, 0x0) 15:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x5, [0xe1], [0xc1]}) 15:18:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:28 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1334.678321][ C1] net_ratelimit: 19 callbacks suppressed [ 1334.678330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1334.691091][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0xff, 0x0, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:29 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)=""/93, 0x5d) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x10000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100), 0x10) sched_yield() ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000340)={{0x0, 0x2, 0x10001, 0x8, 'syz1\x00', 0x4}, 0x1, [0x1, 0x6, 0x3, 0x1, 0x81, 0x9b5, 0x7f, 0x80, 0x2, 0xff, 0x10000, 0x29b, 0x2, 0x3, 0x65a, 0xfff, 0x3, 0x7, 0x4ac, 0x4, 0x8, 0x1, 0x3, 0x3, 0x56c, 0x5, 0x6, 0x0, 0x2, 0x93, 0x4, 0x7fff, 0x8f5b, 0x6, 0xd3, 0x0, 0x3, 0x80000000, 0x4, 0x1, 0x0, 0x1ff, 0x1, 0x7, 0x180000, 0xffffffff, 0x6, 0x4, 0xffffffff, 0xfffffffeffffffff, 0x8001, 0x8, 0x3, 0x9, 0x6, 0x41d, 0x2, 0x5, 0x101, 0x0, 0xff, 0x4, 0x7f, 0x81, 0x5, 0x100, 0x1, 0x3, 0x4, 0x5, 0x800, 0x8, 0x8, 0xffffffffffff7fff, 0x7fff, 0x4, 0x5, 0x1, 0xdafc, 0x101, 0xfffffffeffffffff, 0x9, 0x7fff, 0x1ff80, 0xe1, 0xe000000000000, 0x5, 0x68a, 0x748665f1, 0x6c5c, 0x401, 0x8001, 0x1ff, 0xb69, 0x7, 0x4, 0x9, 0x6, 0x100000001, 0x8, 0x251, 0x80, 0x2, 0x7f, 0xfffffffffffffff8, 0x81, 0x7, 0x0, 0x3, 0x395, 0x1, 0x100, 0x1ff, 0x537, 0xdfdc, 0x1, 0x0, 0x5, 0x8001, 0x6d, 0x3, 0x0, 0x1872, 0x8, 0xa9bc, 0xc00000000000000, 0x4080000000000, 0x8], {0x77359400}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x3f, 0x1, 0x0, 0x1, 0x6}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x10100) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000180)=""/46, 0x134000, 0x1000, 0xa6cf}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:18:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x5, [0xc0000080], [0xc1]}) 15:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x7, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xa004, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x100000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0x0, 0x81, 0x1000}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1335.718324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1335.718367][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1335.724197][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0xff, 0x0, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 1335.798377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1335.798824][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1335.811892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1335.823304][T25582] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1335.870749][T25582] CPU: 1 PID: 25582 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1335.879501][T25582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.879508][T25582] Call Trace: [ 1335.879531][T25582] dump_stack+0x197/0x210 [ 1335.879550][T25582] dump_header+0x10b/0x82d [ 1335.879568][T25582] oom_kill_process.cold+0x10/0x15 [ 1335.879585][T25582] out_of_memory+0x334/0x13c0 [ 1335.879605][T25582] ? retint_kernel+0x2b/0x2b [ 1335.879621][T25582] ? oom_killer_disable+0x280/0x280 [ 1335.879655][T25582] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1335.879670][T25582] ? memcg_oom_wake_function+0x700/0x700 [ 1335.879695][T25582] ? do_raw_spin_unlock+0x178/0x270 [ 1335.901856][T25582] ? _raw_spin_unlock+0x28/0x40 [ 1335.916226][T25582] try_charge+0xf76/0x14d0 [ 1335.916241][T25582] ? find_held_lock+0x35/0x130 [ 1335.916266][T25582] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1335.926991][T25582] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1335.927009][T25582] ? find_held_lock+0x35/0x130 [ 1335.927030][T25582] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1335.974102][T25582] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1335.974121][T25582] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1335.974142][T25582] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1335.974160][T25582] __memcg_kmem_charge+0x13a/0x3a0 [ 1335.974181][T25582] __alloc_pages_nodemask+0x4f5/0x910 [ 1336.001141][T25582] ? retint_kernel+0x2b/0x2b [ 1336.005758][T25582] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1336.011502][T25582] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 1336.016976][T25582] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1336.023235][T25582] alloc_pages_current+0x107/0x210 [ 1336.028366][T25582] pte_alloc_one+0x1b/0x1a0 [ 1336.032885][T25582] __pte_alloc+0x20/0x310 [ 1336.037247][T25582] copy_page_range+0x1616/0x20b0 [ 1336.042252][T25582] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1336.047826][T25582] ? __rb_insert_augmented+0x20c/0xd90 [ 1336.053303][T25582] ? validate_mm_rb+0xa3/0xc0 [ 1336.058026][T25582] ? __vma_link_rb+0x5ad/0x770 [ 1336.062845][T25582] dup_mm+0xa67/0x1430 [ 1336.067206][T25582] ? vm_area_dup+0x170/0x170 [ 1336.071814][T25582] ? debug_mutex_init+0x2d/0x60 [ 1336.076690][T25582] copy_process+0x2ad6/0x7230 [ 1336.081374][T25582] ? mark_held_locks+0xa4/0xf0 [ 1336.086169][T25582] ? __cleanup_sighand+0xc0/0xc0 [ 1336.091115][T25582] ? __might_fault+0x12b/0x1e0 [ 1336.095889][T25582] ? __might_fault+0x12b/0x1e0 [ 1336.100671][T25582] _do_fork+0x146/0x1090 [ 1336.104917][T25582] ? lock_acquire+0x20b/0x410 [ 1336.109604][T25582] ? copy_init_mm+0x20/0x20 [ 1336.114118][T25582] ? __kasan_check_read+0x11/0x20 [ 1336.119260][T25582] ? _copy_to_user+0x118/0x160 [ 1336.124046][T25582] __x64_sys_clone+0x19a/0x260 [ 1336.128829][T25582] ? __ia32_sys_vfork+0xd0/0xd0 [ 1336.133706][T25582] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1336.139007][T25582] ? trace_hardirqs_on+0x67/0x240 [ 1336.144047][T25582] do_syscall_64+0xfa/0x790 [ 1336.148562][T25582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1336.154460][T25582] RIP: 0033:0x45a909 [ 1336.158357][T25582] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1336.177972][T25582] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1336.186399][T25582] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1336.194491][T25582] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.202475][T25582] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1336.210455][T25582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 15:18:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x3f, 0x2, 0xff, 0x3, 0x806}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0xff, 0x0, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000130a075a1dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1336.218442][T25582] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1336.228505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.234322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.262806][T25625] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1336.575629][T25582] memory: usage 307200kB, limit 307200kB, failcnt 2356 [ 1336.598539][T25582] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1336.626377][T25582] Memory cgroup stats for /syz5: [ 1336.635946][T25582] anon 280596480 [ 1336.635946][T25582] file 151552 [ 1336.635946][T25582] kernel_stack 4939776 [ 1336.635946][T25582] slab 9097216 [ 1336.635946][T25582] sock 0 [ 1336.635946][T25582] shmem 65536 [ 1336.635946][T25582] file_mapped 0 [ 1336.635946][T25582] file_dirty 0 [ 1336.635946][T25582] file_writeback 135168 [ 1336.635946][T25582] anon_thp 264241152 [ 1336.635946][T25582] inactive_anon 135168 [ 1336.635946][T25582] active_anon 280518656 [ 1336.635946][T25582] inactive_file 122880 [ 1336.635946][T25582] active_file 45056 [ 1336.635946][T25582] unevictable 0 [ 1336.635946][T25582] slab_reclaimable 1081344 [ 1336.635946][T25582] slab_unreclaimable 8015872 [ 1336.635946][T25582] pgfault 170049 [ 1336.635946][T25582] pgmajfault 0 [ 1336.635946][T25582] workingset_refault 198 [ 1336.635946][T25582] workingset_activate 33 [ 1336.635946][T25582] workingset_nodereclaim 0 [ 1336.635946][T25582] pgrefill 2180 [ 1336.635946][T25582] pgscan 2164 [ 1336.635946][T25582] pgsteal 282 [ 1336.743525][T25582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20897,uid=0 [ 1336.770632][T25582] Memory cgroup out of memory: Killed process 20897 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:18:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x808c00, 0x8c) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x1}}}, 0x18) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={{0x2, 0x0, @reserved="9b8581f41915db700d38bc60d1c5f20b7f63e9f14d8944141c62b27ee04fa323"}}) 15:18:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:18:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = msgget(0x3, 0x1) msgrcv(r3, &(0x7f0000000180)={0x0, ""/72}, 0x50, 0x0, 0x1000) 15:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) dup2(r3, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pwrite64(r0, &(0x7f0000000180)="8bdbb0bc62782c36dbfa26b6eb67f9b6042f6f35196967842bd84d0b042af63d8929dded23944d9a6f513b580937c2fc6fd8c7bc66c026f499555b5275bdb76e5e65fa926de24977e99fec12a303da67efc1bb421c081ed8a6745cea09bf2fb0d65ff68ac785d094be507fd78b42a989a3baa4aad3b8a7022f7d9876ac10ea5d461a77ccc96e1bc4816e0580d39a0cee831d", 0x92, 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) fcntl$setflags(r8, 0x2, 0x1) 15:18:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:31 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000003c0)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff71) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:31 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:31 executing program 2: 15:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x0, 0x3, 0x8) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) getpeername$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100860000", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c4c", @ANYRES32=r5, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) setfsuid(r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1337.696173][T25686] bond0: (slave bond_slave_1): Releasing backup interface 15:18:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x220000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x3, {0x10000, 0x5, "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", 0x6, 0x80, 0x6, 0x0, 0x2, 0x9, 0x82}, r4}}, 0x128) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) lsetxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@ng={0x4, 0x9, "f2"}, 0x3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:18:32 executing program 2: 15:18:32 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:32 executing program 2: 15:18:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:32 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e24, 0x8000, @empty, 0x7}, @in6={0xa, 0x4e22, 0x1, @local, 0x8000}], 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1339.454016][T25692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.498539][T25696] bond0: (slave bond_slave_1): Releasing backup interface [ 1339.878312][ C1] net_ratelimit: 13 callbacks suppressed [ 1339.878320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1339.878656][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1339.884068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1339.890220][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1339.958293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1339.959073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1339.964124][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:34 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x11f943, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="560fb5dbf75abee23e9ec00d079f21699c86aa85459465ac8a0f80c5d3b1db26b331bbe2b0d31142fed56ae3d7a28a3a1175ee45c035454fd58c8de4f7d5ac49f639b82d65b25b2421f5eedc366d2466aa3fa9e74ec2c15ee7ab133a35dc2c04319e60e6fe4b9fdf7ab07b41e8c35318005d7122f972cfab83fa3d0ba9088faa2dd848e6f9630b3e821458d4d97ad912a2c09d9b13d3bfd5bee29365e32295f0a0db01a179e30616bf912105e75530736b81eb053193e09f527a8cf49336360ffe479363f7446130fe797a0e952fa99789a74c233f77c09a84e15558f402c9507f0d65ce9f269fec183bf4", 0xeb}], 0x1, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0xff}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x63, "94f4dcb5866fa73df0d96ea678e5b440f3e46446343dc590f2d9084db8b246e2bec9f3b6909c4280055a1db4f5029a5a9130f2f0fce8235d87435b538a72ff682bba69074855b76a327371a0753ab95aaf6620af0d6cc8ceee5c38a42e066a4d9d58c0"}, @assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xe0, 0x117, 0x2, 0xcb, "eb977957f3847ab0d3833f9a5398374241d8155cd8df003bc3587915796e1f1308baf59c028ef0d10f141d67c4fc1256f514075d30652a6bf91966d4b479f6af87289fc817dee7978f57cca2c6757c1a968e2ac60b60458858b0bd90a37e221357a041b46258e15be3c88c682528dfe9e78b478e181712a5142b0c8a22f57587d4e1c35f57c62f736d842ec6d4f661a07368b8e78824bb6842b3a139bf6229bab387486e7baf4dad4d7d54e12a5bd732ee16c70a3d4ea601fa47f4b855e3b51cc0a0f6d975330906920067"}, @op={0x18}], 0x1e8, 0x4000000}, 0x40044) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:34 executing program 2: 15:18:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x0, 0x6000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x155400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x3, 0x1, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = eventfd2(0xffff, 0x801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1, r3}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmdt(r5) shmdt(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x880, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000180)=0x7fff) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1340.011912][T25739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:18:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:34 executing program 2: 15:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)='k', 0x1}, 0x68) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r3, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008087}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r3, 0x40d96fe0bd3b032b, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:18:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1340.358337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.364231][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:18:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:34 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) 15:18:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x1850, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028001400000019000540000000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000040)={r7, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r7, 0x97}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r8, 0x60000000}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) preadv(r9, &(0x7f0000000640)=[{&(0x7f0000000200)}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000540)=""/245, 0xf5}], 0x6, 0x7fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1340.918303][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:18:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ppoll(&(0x7f0000000100)=[{r0, 0x100}, {r2, 0x2}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x8}, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1341.037318][T25796] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1341.098529][T25796] CPU: 1 PID: 25796 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1341.107249][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.117316][T25796] Call Trace: [ 1341.120622][T25796] dump_stack+0x197/0x210 [ 1341.124979][T25796] dump_header+0x10b/0x82d [ 1341.129504][T25796] ? oom_kill_process+0x94/0x420 [ 1341.134474][T25796] oom_kill_process.cold+0x10/0x15 [ 1341.139608][T25796] out_of_memory+0x334/0x13c0 [ 1341.144304][T25796] ? find_held_lock+0x35/0x130 [ 1341.149093][T25796] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1341.154921][T25796] ? oom_killer_disable+0x280/0x280 [ 1341.160154][T25796] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1341.165721][T25796] ? memcg_oom_wake_function+0x700/0x700 [ 1341.171388][T25796] ? do_raw_spin_unlock+0x178/0x270 [ 1341.176610][T25796] ? _raw_spin_unlock+0x28/0x40 [ 1341.181503][T25796] try_charge+0xf76/0x14d0 [ 1341.181530][T25796] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1341.181542][T25796] ? percpu_ref_tryget+0x102/0x230 [ 1341.181594][T25796] ? rcu_read_lock_held+0x9c/0xb0 [ 1341.181609][T25796] ? __kasan_check_read+0x11/0x20 [ 1341.181629][T25796] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1341.191569][T25796] mem_cgroup_try_charge+0x136/0x590 [ 1341.191588][T25796] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1341.191606][T25796] wp_page_copy+0x407/0x1560 [ 1341.191619][T25796] ? find_held_lock+0x35/0x130 [ 1341.191638][T25796] ? follow_pfn+0x2a0/0x2a0 [ 1341.191652][T25796] ? lock_downgrade+0x920/0x920 [ 1341.191663][T25796] ? vm_normal_page+0x15d/0x3c0 15:18:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1341.191678][T25796] ? __pte_alloc_kernel+0x210/0x210 [ 1341.191698][T25796] ? do_raw_spin_unlock+0x178/0x270 [ 1341.191716][T25796] do_wp_page+0x543/0x1540 [ 1341.261618][T25796] ? do_raw_spin_lock+0x12a/0x2e0 [ 1341.266643][T25796] ? lock_acquire+0x190/0x410 [ 1341.271307][T25796] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1341.276662][T25796] ? fault_around_bytes_set+0xa0/0xa0 [ 1341.282034][T25796] __handle_mm_fault+0x327b/0x3da0 [ 1341.287180][T25796] ? vm_iomap_memory+0x1a0/0x1a0 [ 1341.292113][T25796] ? handle_mm_fault+0x292/0xa50 [ 1341.297052][T25796] ? handle_mm_fault+0x7a0/0xa50 [ 1341.301999][T25796] ? __kasan_check_read+0x11/0x20 [ 1341.307022][T25796] handle_mm_fault+0x3b2/0xa50 [ 1341.311794][T25796] __do_page_fault+0x536/0xd80 [ 1341.316557][T25796] do_page_fault+0x38/0x590 [ 1341.321195][T25796] page_fault+0x39/0x40 [ 1341.325335][T25796] RIP: 0033:0x40f958 [ 1341.329217][T25796] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf fa 00 4c 00 31 c0 e8 53 25 ff ff 31 ff e8 9c 21 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ee 2c 66 00 [ 1341.348802][T25796] RSP: 002b:0000000000a6fb30 EFLAGS: 00010246 [ 1341.354853][T25796] RAX: 0000000087bf5e75 RBX: 000000002757f259 RCX: 0000001b32720000 [ 1341.362809][T25796] RDX: 0000000000000000 RSI: 0000000000001e75 RDI: ffffffff87bf5e75 [ 1341.370776][T25796] RBP: 0000000000000004 R08: 0000000087bf5e75 R09: 0000000087bf5e79 [ 1341.378730][T25796] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1341.386687][T25796] R13: 0000000080000000 R14: 00007f4c4248e008 R15: 0000000000000004 [ 1341.394658][T25796] ? ncsi_write_package_info+0xda5/0xf50 [ 1341.405274][T25796] memory: usage 307200kB, limit 307200kB, failcnt 2399 [ 1341.412641][T25796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1341.421097][T25796] Memory cgroup stats for /syz5: [ 1341.421214][T25796] anon 279322624 [ 1341.421214][T25796] file 151552 [ 1341.421214][T25796] kernel_stack 5124096 [ 1341.421214][T25796] slab 9367552 [ 1341.421214][T25796] sock 0 [ 1341.421214][T25796] shmem 65536 [ 1341.421214][T25796] file_mapped 0 [ 1341.421214][T25796] file_dirty 0 [ 1341.421214][T25796] file_writeback 135168 [ 1341.421214][T25796] anon_thp 262144000 [ 1341.421214][T25796] inactive_anon 135168 [ 1341.421214][T25796] active_anon 279379968 [ 1341.421214][T25796] inactive_file 122880 [ 1341.421214][T25796] active_file 45056 [ 1341.421214][T25796] unevictable 0 [ 1341.421214][T25796] slab_reclaimable 1081344 [ 1341.421214][T25796] slab_unreclaimable 8286208 [ 1341.421214][T25796] pgfault 170511 [ 1341.421214][T25796] pgmajfault 0 [ 1341.421214][T25796] workingset_refault 198 15:18:35 executing program 2: [ 1341.421214][T25796] workingset_activate 33 [ 1341.421214][T25796] workingset_nodereclaim 0 [ 1341.421214][T25796] pgrefill 2180 [ 1341.421214][T25796] pgscan 2164 [ 1341.421214][T25796] pgsteal 282 [ 1341.537250][T25811] device bond_slave_1 entered promiscuous mode 15:18:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1341.552814][T25796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20864,uid=0 [ 1341.580289][T25811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.601502][T25796] Memory cgroup out of memory: Killed process 20864 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000180)="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", 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1341.751791][T25813] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:18:35 executing program 2: 15:18:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) 15:18:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:36 executing program 2: 15:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:36 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:36 executing program 2: 15:18:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1342.451110][T25858] bond0: (slave bond_slave_1): Releasing backup interface [ 1342.490928][T25858] device bond_slave_1 left promiscuous mode 15:18:36 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x800000000000}, 0xc, 0x0, 0x0, 0x5, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000000100000000", @ANYRES64=0x0, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed605a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e9701db0100000000000024ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7fac6386dee921610a01582af18f09c4aed9c628ad84c817d1c5ee25d4beb3427fecaadf3d09324a5e271f3aeda8ab7f9a6bba37d6d6e0c4c4cad3a9a3d0e2", @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="6fc8fc3b0f026cc295c3097497831b60f7f1ca970d4a1ff83f4d2e9fa012a5c1baf7302c9fa0b267453fdf7dbe23630e3a52ca33e3950cc3f42daf5ca833f0513bf6dbe34abd1b0f4de18a4ed53d076f79f4c96f0432376e952553354de7361c7da8c5c0037c4789578944387bcd0324683828d10434b1c0e3c999b4189047f7cec3f214f837878e0260d526084a36fa0090a855e6e353e28f572e2dc1ea60de480cdb89a7be93d4f34e51e8a3e4cb511dfe038c46500ba5efab9edeb0b2ec9adb3a2d023358f5155d0300000043c93646920aca1a206e8e200ddeff91028d0999978e6839abacec95cc56434617fc3b406f73297a012efab8", @ANYRES32=r6, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYRES16=r7], 0xd, 0x0) ioprio_get$uid(0x3, r5) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1342.569504][T25868] device bond_slave_1 entered promiscuous mode [ 1342.576291][T25868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:18:36 executing program 2: 15:18:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1342.728798][T25879] bond0: (slave bond_slave_1): Releasing backup interface 15:18:37 executing program 2: 15:18:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000100)="c5ce2178700f00fdc67b4213078b3da94b708d24645fde7782", 0x19}, 0x2e5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x7, 0x5, 0x57, 0x0, 0x101, 0x0, 0x81, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x43, 0x20}) 15:18:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000180)="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", 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:37 executing program 2: 15:18:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1343.411048][T25881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:18:37 executing program 2: [ 1343.526772][T25879] bond0: (slave bond_slave_1): Releasing backup interface [ 1343.925927][T25881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:18:38 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)=0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, 0x0) 15:18:38 executing program 2: 15:18:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) alarm(0x100000000) 15:18:38 executing program 2: 15:18:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, 0x0) 15:18:38 executing program 2: [ 1344.444509][T25939] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 15:18:38 executing program 2: [ 1344.489276][T25939] CPU: 0 PID: 25939 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1344.497980][T25939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.508040][T25939] Call Trace: [ 1344.511392][T25939] dump_stack+0x197/0x210 [ 1344.515746][T25939] dump_header+0x10b/0x82d [ 1344.520189][T25939] ? oom_kill_process+0x94/0x420 [ 1344.525143][T25939] oom_kill_process.cold+0x10/0x15 [ 1344.530283][T25939] out_of_memory+0x334/0x13c0 [ 1344.534984][T25939] ? find_held_lock+0x35/0x130 15:18:38 executing program 2: [ 1344.539768][T25939] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1344.545585][T25939] ? oom_killer_disable+0x280/0x280 [ 1344.550805][T25939] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1344.550820][T25939] ? memcg_oom_wake_function+0x700/0x700 [ 1344.550840][T25939] ? do_raw_spin_unlock+0x178/0x270 [ 1344.567200][T25939] ? _raw_spin_unlock+0x28/0x40 [ 1344.572268][T25939] try_charge+0xf76/0x14d0 [ 1344.576704][T25939] ? find_held_lock+0x35/0x130 [ 1344.581498][T25939] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1344.587060][T25939] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1344.592626][T25939] ? find_held_lock+0x35/0x130 [ 1344.597412][T25939] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1344.603026][T25939] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1344.608603][T25939] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1344.614003][T25939] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1344.619580][T25939] __memcg_kmem_charge+0x13a/0x3a0 [ 1344.624735][T25939] copy_process+0x79d/0x7230 [ 1344.629344][T25939] ? find_held_lock+0x35/0x130 [ 1344.634144][T25939] ? __cleanup_sighand+0xc0/0xc0 15:18:38 executing program 2: [ 1344.639107][T25939] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1344.645290][T25939] ? __kasan_check_read+0x11/0x20 [ 1344.650332][T25939] ? __lock_acquire+0x8a0/0x4a00 [ 1344.655285][T25939] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1344.661376][T25939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.667636][T25939] ? debug_smp_processor_id+0x33/0x18a [ 1344.673123][T25939] _do_fork+0x146/0x1090 [ 1344.677388][T25939] ? copy_init_mm+0x20/0x20 [ 1344.681910][T25939] ? lock_downgrade+0x920/0x920 [ 1344.686790][T25939] __x64_sys_clone+0x19a/0x260 [ 1344.691577][T25939] ? __ia32_sys_vfork+0xd0/0xd0 [ 1344.696441][T25939] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1344.702094][T25939] ? mem_cgroup_handle_over_high+0x21b/0x2a0 [ 1344.708120][T25939] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1344.713428][T25939] ? trace_hardirqs_on+0x67/0x240 [ 1344.718477][T25939] do_syscall_64+0xfa/0x790 [ 1344.723001][T25939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.728905][T25939] RIP: 0033:0x45d2d9 [ 1344.732812][T25939] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1344.752426][T25939] RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1344.760892][T25939] RAX: ffffffffffffffda RBX: 00007f4c4044b700 RCX: 000000000045d2d9 [ 1344.768881][T25939] RDX: 00007f4c4044b9d0 RSI: 00007f4c4044adb0 RDI: 00000000003d0f00 [ 1344.776870][T25939] RBP: 0000000000a6fce0 R08: 00007f4c4044b700 R09: 00007f4c4044b700 [ 1344.784857][T25939] R10: 00007f4c4044b9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1344.792843][T25939] R13: 0000000000a6fb7f R14: 00007f4c4044b9c0 R15: 000000000075c07c [ 1344.855423][T25939] memory: usage 307200kB, limit 307200kB, failcnt 2430 [ 1344.909256][T25939] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1344.932340][T25939] Memory cgroup stats for /syz5: [ 1344.932458][T25939] anon 277991424 [ 1344.932458][T25939] file 151552 [ 1344.932458][T25939] kernel_stack 5382144 [ 1344.932458][T25939] slab 9641984 [ 1344.932458][T25939] sock 0 [ 1344.932458][T25939] shmem 65536 [ 1344.932458][T25939] file_mapped 0 [ 1344.932458][T25939] file_dirty 0 [ 1344.932458][T25939] file_writeback 135168 [ 1344.932458][T25939] anon_thp 260046848 [ 1344.932458][T25939] inactive_anon 135168 [ 1344.932458][T25939] active_anon 278048768 [ 1344.932458][T25939] inactive_file 122880 [ 1344.932458][T25939] active_file 45056 [ 1344.932458][T25939] unevictable 0 [ 1344.932458][T25939] slab_reclaimable 1081344 [ 1344.932458][T25939] slab_unreclaimable 8560640 [ 1344.932458][T25939] pgfault 170940 [ 1344.932458][T25939] pgmajfault 0 [ 1344.932458][T25939] workingset_refault 198 [ 1344.932458][T25939] workingset_activate 33 [ 1344.932458][T25939] workingset_nodereclaim 0 [ 1344.932458][T25939] pgrefill 2180 [ 1344.932458][T25939] pgscan 2164 [ 1344.932458][T25939] pgsteal 282 [ 1345.028694][T25939] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20838,uid=0 [ 1345.044827][T25939] Memory cgroup out of memory: Killed process 20838 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1345.064523][ T1118] oom_reaper: reaped process 20838 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1345.078299][ C1] net_ratelimit: 20 callbacks suppressed [ 1345.078308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1345.089808][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x800, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000200)={r4, 0x1000, 0x40}) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r6, 0x1, 0x4, r7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:39 executing program 2: 15:18:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, 0x0) 15:18:39 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') syslog(0x11, &(0x7f00000003c0)=""/164, 0xa4) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41080810}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe8, r3, 0x0, 0x70bd2b, 0xffff7fff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x88}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x75c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6b}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040}, 0x40) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:39 executing program 2: 15:18:40 executing program 3: 15:18:40 executing program 2: 15:18:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESOCT], @ANYBLOB='\a\x00'/24], 0x48}, 0x0) 15:18:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="81", 0xfffffffffffffef4}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1346.118312][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.118357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.124143][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:40 executing program 2: [ 1346.198326][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.198331][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.209907][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:40 executing program 3: [ 1346.360910][T25980] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1346.418695][T25980] CPU: 1 PID: 25980 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1346.427424][T25980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.437493][T25980] Call Trace: [ 1346.440799][T25980] dump_stack+0x197/0x210 [ 1346.445150][T25980] dump_header+0x10b/0x82d [ 1346.449580][T25980] ? oom_kill_process+0x94/0x420 [ 1346.454621][T25980] oom_kill_process.cold+0x10/0x15 [ 1346.459749][T25980] out_of_memory+0x334/0x13c0 [ 1346.464440][T25980] ? find_held_lock+0x35/0x130 [ 1346.469579][T25980] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1346.475413][T25980] ? oom_killer_disable+0x280/0x280 [ 1346.480648][T25980] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1346.486217][T25980] ? memcg_oom_wake_function+0x700/0x700 [ 1346.491879][T25980] ? do_raw_spin_unlock+0x178/0x270 [ 1346.497095][T25980] ? _raw_spin_unlock+0x28/0x40 [ 1346.501968][T25980] try_charge+0xf76/0x14d0 [ 1346.506415][T25980] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1346.511974][T25980] ? percpu_ref_tryget+0x102/0x230 [ 1346.517105][T25980] ? rcu_read_lock_held+0x9c/0xb0 [ 1346.522151][T25980] ? __kasan_check_read+0x11/0x20 [ 1346.527195][T25980] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1346.532771][T25980] mem_cgroup_try_charge+0x136/0x590 [ 1346.538080][T25980] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1346.543725][T25980] wp_page_copy+0x407/0x1560 [ 1346.548323][T25980] ? find_held_lock+0x35/0x130 [ 1346.553108][T25980] ? follow_pfn+0x2a0/0x2a0 [ 1346.557629][T25980] ? lock_downgrade+0x920/0x920 [ 1346.562523][T25980] ? swp_swapcount+0x540/0x540 [ 1346.567309][T25980] ? do_raw_spin_unlock+0x178/0x270 [ 1346.572522][T25980] do_wp_page+0x543/0x1540 [ 1346.576985][T25980] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1346.582381][T25980] __handle_mm_fault+0x327b/0x3da0 [ 1346.587527][T25980] ? vm_iomap_memory+0x1a0/0x1a0 [ 1346.592469][T25980] ? handle_mm_fault+0x292/0xa50 [ 1346.597434][T25980] ? handle_mm_fault+0x7a0/0xa50 [ 1346.602384][T25980] ? __kasan_check_read+0x11/0x20 [ 1346.607432][T25980] handle_mm_fault+0x3b2/0xa50 [ 1346.612222][T25980] __do_page_fault+0x536/0xd80 [ 1346.617018][T25980] do_page_fault+0x38/0x590 [ 1346.621546][T25980] page_fault+0x39/0x40 [ 1346.625701][T25980] RIP: 0033:0x415f93 [ 1346.629598][T25980] Code: e9 4c 89 e2 ff 74 24 48 4c 8b 4c 24 10 89 ee 4c 8b 44 24 18 48 89 df e8 cb f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 48 f7 d8 <64> 89 04 25 d4 ff ff ff 48 83 c8 ff c3 48 81 ec 98 00 00 00 31 ff [ 1346.649211][T25980] RSP: 002b:0000000000a6fbf8 EFLAGS: 00010213 [ 1346.655289][T25980] RAX: 000000000000006e RBX: 00000000000003e8 RCX: 000000000045a909 15:18:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x5, 0x3, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:40 executing program 3: 15:18:40 executing program 2: [ 1346.663273][T25980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf2c [ 1346.671239][T25980] RBP: 000000000000002d R08: ffffffffffffffff R09: ffffffffffffffff [ 1346.679207][T25980] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bf20 [ 1346.687162][T25980] R13: 0000000000148acc R14: 0000000000148af9 R15: 000000000075bf2c [ 1346.839042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.845901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.988411][T25980] memory: usage 307200kB, limit 307200kB, failcnt 2477 [ 1346.995516][T25980] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1347.003016][T25980] Memory cgroup stats for /syz5: [ 1347.003134][T25980] anon 277889024 [ 1347.003134][T25980] file 151552 [ 1347.003134][T25980] kernel_stack 5382144 [ 1347.003134][T25980] slab 9781248 [ 1347.003134][T25980] sock 0 [ 1347.003134][T25980] shmem 65536 [ 1347.003134][T25980] file_mapped 0 [ 1347.003134][T25980] file_dirty 0 [ 1347.003134][T25980] file_writeback 135168 [ 1347.003134][T25980] anon_thp 260046848 [ 1347.003134][T25980] inactive_anon 135168 [ 1347.003134][T25980] active_anon 277893120 [ 1347.003134][T25980] inactive_file 122880 [ 1347.003134][T25980] active_file 45056 [ 1347.003134][T25980] unevictable 0 [ 1347.003134][T25980] slab_reclaimable 1081344 [ 1347.003134][T25980] slab_unreclaimable 8699904 [ 1347.003134][T25980] pgfault 171039 [ 1347.003134][T25980] pgmajfault 0 [ 1347.003134][T25980] workingset_refault 198 [ 1347.003134][T25980] workingset_activate 33 [ 1347.003134][T25980] workingset_nodereclaim 0 [ 1347.003134][T25980] pgrefill 2180 [ 1347.003134][T25980] pgscan 2164 [ 1347.003134][T25980] pgsteal 282 [ 1347.101019][T25980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25980,uid=0 [ 1347.117236][T25980] Memory cgroup out of memory: Killed process 25980 (syz-executor.5) total-vm:72584kB, anon-rss:2212kB, file-rss:35748kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1347.136647][ T1118] oom_reaper: reaped process 25980 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 15:18:41 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$int_out(r0, 0xa8c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e23, @local}, {0x2, 0x7f, @rand_addr=0x1}, 0x0, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x7, 0x2, 0x800}) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:41 executing program 3: 15:18:41 executing program 2: 15:18:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100), 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:18:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:41 executing program 3: 15:18:41 executing program 2: [ 1347.583626][ T8796] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1347.689269][ T8796] CPU: 1 PID: 8796 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1347.697914][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.707980][ T8796] Call Trace: [ 1347.711285][ T8796] dump_stack+0x197/0x210 [ 1347.715635][ T8796] dump_header+0x10b/0x82d [ 1347.720064][ T8796] ? oom_kill_process+0x94/0x420 [ 1347.725013][ T8796] oom_kill_process.cold+0x10/0x15 [ 1347.730135][ T8796] out_of_memory+0x334/0x13c0 [ 1347.734824][ T8796] ? find_held_lock+0x35/0x130 [ 1347.739611][ T8796] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1347.745433][ T8796] ? oom_killer_disable+0x280/0x280 [ 1347.750685][ T8796] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1347.756242][ T8796] ? memcg_oom_wake_function+0x700/0x700 [ 1347.761898][ T8796] ? do_raw_spin_unlock+0x178/0x270 [ 1347.767117][ T8796] ? _raw_spin_unlock+0x28/0x40 [ 1347.771983][ T8796] try_charge+0xf76/0x14d0 [ 1347.776465][ T8796] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1347.782017][ T8796] ? percpu_ref_tryget+0x102/0x230 [ 1347.787140][ T8796] ? rcu_read_lock_held+0x9c/0xb0 [ 1347.792177][ T8796] ? __kasan_check_read+0x11/0x20 [ 1347.797213][ T8796] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1347.802769][ T8796] mem_cgroup_try_charge+0x136/0x590 [ 1347.808071][ T8796] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1347.813716][ T8796] wp_page_copy+0x407/0x1560 [ 1347.818314][ T8796] ? find_held_lock+0x35/0x130 [ 1347.823088][ T8796] ? follow_pfn+0x2a0/0x2a0 [ 1347.827596][ T8796] ? lock_downgrade+0x920/0x920 [ 1347.832458][ T8796] ? swp_swapcount+0x540/0x540 [ 1347.837234][ T8796] ? do_raw_spin_unlock+0x178/0x270 [ 1347.842440][ T8796] do_wp_page+0x543/0x1540 [ 1347.846873][ T8796] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1347.852262][ T8796] __handle_mm_fault+0x327b/0x3da0 [ 1347.857389][ T8796] ? vm_iomap_memory+0x1a0/0x1a0 [ 1347.862339][ T8796] ? handle_mm_fault+0x292/0xa50 [ 1347.867289][ T8796] ? handle_mm_fault+0x7a0/0xa50 [ 1347.872230][ T8796] ? __kasan_check_read+0x11/0x20 [ 1347.872249][ T8796] handle_mm_fault+0x3b2/0xa50 [ 1347.872271][ T8796] __do_page_fault+0x536/0xd80 [ 1347.872300][ T8796] do_page_fault+0x38/0x590 [ 1347.872319][ T8796] page_fault+0x39/0x40 [ 1347.895462][ T8796] RIP: 0033:0x458ffe [ 1347.899360][ T8796] Code: 5c 41 5d 41 5e 5d c3 48 c7 c2 d4 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 64 8b 04 25 d0 02 00 00 41 39 c4 0f 85 2f 01 00 00 <64> 44 89 04 25 d4 02 00 00 45 85 f6 0f 85 7f 00 00 00 48 85 db 74 [ 1347.918973][ T8796] RSP: 002b:0000000000a6fd60 EFLAGS: 00010246 [ 1347.925133][ T8796] RAX: 0000000000000001 RBX: 0000000000a6fd60 RCX: 0000000000458eda 15:18:41 executing program 3: [ 1347.933113][ T8796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1347.941179][ T8796] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 0000000001ab0940 [ 1347.949160][ T8796] R10: 0000000001ab0c10 R11: 0000000000000246 R12: 0000000000000001 [ 1347.957137][ T8796] R13: 0000000000001b30 R14: 0000000000000000 R15: 0000000000a6fdf0 15:18:42 executing program 3: 15:18:42 executing program 2: 15:18:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:42 executing program 2: [ 1348.238599][ T8796] memory: usage 307200kB, limit 307200kB, failcnt 3527 [ 1348.248502][ T8796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1348.277149][ T8796] Memory cgroup stats for /syz5: [ 1348.277278][ T8796] anon 277889024 [ 1348.277278][ T8796] file 151552 [ 1348.277278][ T8796] kernel_stack 5345280 [ 1348.277278][ T8796] slab 9781248 [ 1348.277278][ T8796] sock 0 [ 1348.277278][ T8796] shmem 65536 [ 1348.277278][ T8796] file_mapped 0 [ 1348.277278][ T8796] file_dirty 0 [ 1348.277278][ T8796] file_writeback 135168 [ 1348.277278][ T8796] anon_thp 260046848 [ 1348.277278][ T8796] inactive_anon 135168 [ 1348.277278][ T8796] active_anon 277893120 [ 1348.277278][ T8796] inactive_file 122880 [ 1348.277278][ T8796] active_file 45056 [ 1348.277278][ T8796] unevictable 0 [ 1348.277278][ T8796] slab_reclaimable 1081344 [ 1348.277278][ T8796] slab_unreclaimable 8699904 [ 1348.277278][ T8796] pgfault 171072 [ 1348.277278][ T8796] pgmajfault 0 [ 1348.277278][ T8796] workingset_refault 198 [ 1348.277278][ T8796] workingset_activate 33 [ 1348.277278][ T8796] workingset_nodereclaim 0 [ 1348.277278][ T8796] pgrefill 2180 [ 1348.277278][ T8796] pgscan 2164 [ 1348.277278][ T8796] pgsteal 282 [ 1348.598381][ T8796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20803,uid=0 [ 1348.615712][ T8796] Memory cgroup out of memory: Killed process 20803 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1348.637475][T26035] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1348.648055][T26035] CPU: 1 PID: 26035 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1348.656745][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.666806][T26035] Call Trace: [ 1348.670114][T26035] dump_stack+0x197/0x210 [ 1348.674456][T26035] dump_header+0x10b/0x82d [ 1348.678880][T26035] ? oom_kill_process+0x94/0x420 [ 1348.683834][T26035] oom_kill_process.cold+0x10/0x15 [ 1348.688960][T26035] out_of_memory+0x334/0x13c0 [ 1348.693663][T26035] ? oom_killer_disable+0x280/0x280 [ 1348.698886][T26035] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1348.704449][T26035] ? memcg_oom_wake_function+0x700/0x700 [ 1348.710099][T26035] ? do_raw_spin_unlock+0x178/0x270 [ 1348.715316][T26035] ? _raw_spin_unlock+0x28/0x40 [ 1348.720184][T26035] try_charge+0xa54/0x14d0 [ 1348.724623][T26035] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1348.730177][T26035] ? percpu_ref_tryget+0x102/0x230 [ 1348.735302][T26035] ? rcu_read_lock_held+0x9c/0xb0 [ 1348.740337][T26035] ? __kasan_check_read+0x11/0x20 [ 1348.745374][T26035] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1348.750937][T26035] mem_cgroup_try_charge+0x136/0x590 [ 1348.756234][T26035] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1348.761882][T26035] wp_page_copy+0x407/0x1560 [ 1348.766479][T26035] ? find_held_lock+0x35/0x130 [ 1348.771260][T26035] ? follow_pfn+0x2a0/0x2a0 [ 1348.775774][T26035] ? lock_downgrade+0x920/0x920 [ 1348.780636][T26035] ? vm_normal_page+0x15d/0x3c0 [ 1348.785515][T26035] ? __pte_alloc_kernel+0x210/0x210 [ 1348.790727][T26035] ? do_raw_spin_unlock+0x178/0x270 [ 1348.795964][T26035] do_wp_page+0x543/0x1540 [ 1348.800400][T26035] ? do_raw_spin_lock+0x12a/0x2e0 [ 1348.805549][T26035] ? lock_acquire+0x190/0x410 [ 1348.810239][T26035] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1348.815616][T26035] ? fault_around_bytes_set+0xa0/0xa0 [ 1348.821040][T26035] __handle_mm_fault+0x327b/0x3da0 [ 1348.826176][T26035] ? vm_iomap_memory+0x1a0/0x1a0 [ 1348.831126][T26035] ? handle_mm_fault+0x292/0xa50 [ 1348.836097][T26035] ? handle_mm_fault+0x7a0/0xa50 [ 1348.841040][T26035] ? __kasan_check_read+0x11/0x20 [ 1348.846162][T26035] handle_mm_fault+0x3b2/0xa50 [ 1348.850940][T26035] __do_page_fault+0x536/0xd80 [ 1348.855713][T26035] do_page_fault+0x38/0x590 [ 1348.860235][T26035] page_fault+0x39/0x40 [ 1348.864398][T26035] RIP: 0033:0x40f958 [ 1348.868295][T26035] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf fa 00 4c 00 31 c0 e8 53 25 ff ff 31 ff e8 9c 21 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ee 2c 66 00 [ 1348.887905][T26035] RSP: 002b:0000000000a6fb30 EFLAGS: 00010246 [ 1348.893977][T26035] RAX: 00000000817ac479 RBX: 00000000cdf35449 RCX: 0000001b32720000 [ 1348.901960][T26035] RDX: 0000000000000000 RSI: 0000000000000479 RDI: ffffffff817ac479 [ 1348.909942][T26035] RBP: 0000000000000000 R08: 00000000817ac479 R09: 00000000817ac47d [ 1348.917932][T26035] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1348.925916][T26035] R13: 0000000080000000 R14: 00007f4c4248e008 R15: 0000000000000000 [ 1348.933930][T26035] ? trace_hardirqs_off_caller+0x19/0x230 [ 1348.943137][T26035] memory: usage 304880kB, limit 307200kB, failcnt 3527 [ 1348.958421][T26035] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1348.975681][T26035] Memory cgroup stats for /syz5: [ 1348.975817][T26035] anon 275750912 [ 1348.975817][T26035] file 151552 [ 1348.975817][T26035] kernel_stack 5345280 [ 1348.975817][T26035] slab 9781248 [ 1348.975817][T26035] sock 0 [ 1348.975817][T26035] shmem 65536 [ 1348.975817][T26035] file_mapped 0 [ 1348.975817][T26035] file_dirty 0 [ 1348.975817][T26035] file_writeback 135168 [ 1348.975817][T26035] anon_thp 257949696 [ 1348.975817][T26035] inactive_anon 135168 [ 1348.975817][T26035] active_anon 275755008 [ 1348.975817][T26035] inactive_file 122880 [ 1348.975817][T26035] active_file 45056 [ 1348.975817][T26035] unevictable 0 [ 1348.975817][T26035] slab_reclaimable 1081344 [ 1348.975817][T26035] slab_unreclaimable 8699904 [ 1348.975817][T26035] pgfault 171072 [ 1348.975817][T26035] pgmajfault 0 [ 1348.975817][T26035] workingset_refault 198 [ 1348.975817][T26035] workingset_activate 33 [ 1348.975817][T26035] workingset_nodereclaim 0 [ 1348.975817][T26035] pgrefill 2180 [ 1348.975817][T26035] pgscan 2164 [ 1348.975817][T26035] pgsteal 282 [ 1349.085218][T26035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20755,uid=0 [ 1349.144006][T26035] Memory cgroup out of memory: Killed process 20755 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:18:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) sendfile(r1, r0, 0x0, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x48001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:43 executing program 3: 15:18:43 executing program 2: 15:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sysinfo(&(0x7f0000000180)=""/73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x5, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x0, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:43 executing program 2: 15:18:43 executing program 3: 15:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10, 0x12d8459af471c3a8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:44 executing program 2: 15:18:44 executing program 3: 15:18:44 executing program 2: 15:18:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000180)=""/81) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1350.278325][ C0] net_ratelimit: 12 callbacks suppressed [ 1350.278334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1350.278358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.284061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.358314][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1350.358332][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.364183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.524869][T26070] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1350.545891][T26070] CPU: 1 PID: 26070 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1350.554613][T26070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.564658][T26070] Call Trace: [ 1350.567944][T26070] dump_stack+0x197/0x210 [ 1350.572273][T26070] dump_header+0x10b/0x82d [ 1350.576685][T26070] oom_kill_process.cold+0x10/0x15 [ 1350.581782][T26070] out_of_memory+0x334/0x13c0 [ 1350.586448][T26070] ? find_held_lock+0x35/0x130 [ 1350.591208][T26070] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1350.597007][T26070] ? oom_killer_disable+0x280/0x280 [ 1350.602208][T26070] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1350.607736][T26070] ? memcg_oom_wake_function+0x700/0x700 [ 1350.613357][T26070] ? do_raw_spin_unlock+0x178/0x270 [ 1350.618540][T26070] ? _raw_spin_unlock+0x28/0x40 [ 1350.623410][T26070] try_charge+0xf76/0x14d0 [ 1350.627814][T26070] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1350.633445][T26070] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1350.638974][T26070] ? __this_cpu_preempt_check+0x35/0x190 [ 1350.644590][T26070] ? retint_kernel+0x2b/0x2b [ 1350.649175][T26070] mem_cgroup_try_charge+0x136/0x590 [ 1350.654449][T26070] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1350.660067][T26070] do_huge_pmd_wp_page_fallback+0x24f/0x17f0 [ 1350.666037][T26070] ? defrag_store+0x360/0x360 [ 1350.670713][T26070] ? lock_downgrade+0x920/0x920 [ 1350.675549][T26070] ? swp_swapcount+0x540/0x540 [ 1350.680293][T26070] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 1350.686178][T26070] ? do_raw_spin_unlock+0x178/0x270 [ 1350.691371][T26070] do_huge_pmd_wp_page+0x803/0x21c0 [ 1350.696554][T26070] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1350.702175][T26070] ? __split_huge_pmd+0x2e90/0x2e90 [ 1350.707369][T26070] ? __this_cpu_preempt_check+0x35/0x190 [ 1350.713007][T26070] ? retint_kernel+0x2b/0x2b [ 1350.717584][T26070] ? pmd_val+0x85/0x100 [ 1350.721724][T26070] ? fault_around_bytes_set+0xa0/0xa0 [ 1350.727127][T26070] ? __handle_mm_fault+0x731/0x3da0 [ 1350.732339][T26070] ? write_comp_data+0x9/0x70 [ 1350.737023][T26070] __handle_mm_fault+0x22e8/0x3da0 [ 1350.742144][T26070] ? vm_iomap_memory+0x1a0/0x1a0 [ 1350.747069][T26070] ? lock_release+0x4f3/0x960 [ 1350.751778][T26070] ? handle_mm_fault+0x7a0/0xa50 [ 1350.756722][T26070] ? __kasan_check_read+0x11/0x20 [ 1350.761742][T26070] handle_mm_fault+0x3b2/0xa50 [ 1350.766500][T26070] __do_page_fault+0x536/0xd80 [ 1350.771267][T26070] do_page_fault+0x38/0x590 [ 1350.775771][T26070] page_fault+0x39/0x40 [ 1350.779913][T26070] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1350.786239][T26070] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1350.805839][T26070] RSP: 0018:ffffc90001657e68 EFLAGS: 00010202 [ 1350.811890][T26070] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 1350.819842][T26070] RDX: 0000000000000002 RSI: ffff88809209a000 RDI: 0000000020000940 [ 1350.827797][T26070] RBP: ffffc90001657ea0 R08: 1ffff11012413400 R09: ffffed1012413401 [ 1350.835764][T26070] R10: ffffed1012413400 R11: ffff88809209a001 R12: 0000000020000940 [ 1350.843727][T26070] R13: ffff88809209a000 R14: 0000000020000942 R15: 00007ffffffff000 [ 1350.851714][T26070] ? _copy_to_user+0x146/0x160 [ 1350.856515][T26070] __x64_sys_mincore+0x3ec/0x890 [ 1350.861454][T26070] do_syscall_64+0xfa/0x790 [ 1350.865944][T26070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.871819][T26070] RIP: 0033:0x45a909 [ 1350.875700][T26070] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.895286][T26070] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1350.903681][T26070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 1350.911637][T26070] RDX: 0000000020000940 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 1350.919600][T26070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1350.927561][T26070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1350.935516][T26070] R13: 00000000004c7b36 R14: 00000000004de858 R15: 00000000ffffffff [ 1350.998309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.004168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.118482][T26070] memory: usage 307200kB, limit 307200kB, failcnt 3547 [ 1351.126174][T26070] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1351.153835][T26070] Memory cgroup stats for /syz5: [ 1351.155255][T26070] anon 276033536 [ 1351.155255][T26070] file 151552 [ 1351.155255][T26070] kernel_stack 5382144 [ 1351.155255][T26070] slab 9920512 [ 1351.155255][T26070] sock 0 [ 1351.155255][T26070] shmem 65536 [ 1351.155255][T26070] file_mapped 0 [ 1351.155255][T26070] file_dirty 0 [ 1351.155255][T26070] file_writeback 135168 [ 1351.155255][T26070] anon_thp 257949696 [ 1351.155255][T26070] inactive_anon 135168 [ 1351.155255][T26070] active_anon 276033536 [ 1351.155255][T26070] inactive_file 122880 [ 1351.155255][T26070] active_file 45056 [ 1351.155255][T26070] unevictable 0 [ 1351.155255][T26070] slab_reclaimable 1081344 [ 1351.155255][T26070] slab_unreclaimable 8839168 [ 1351.155255][T26070] pgfault 171237 [ 1351.155255][T26070] pgmajfault 0 [ 1351.155255][T26070] workingset_refault 198 [ 1351.155255][T26070] workingset_activate 33 [ 1351.155255][T26070] workingset_nodereclaim 0 [ 1351.155255][T26070] pgrefill 2180 [ 1351.155255][T26070] pgscan 2164 [ 1351.155255][T26070] pgsteal 282 [ 1351.254389][T26070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26068,uid=0 [ 1351.271223][T26070] Memory cgroup out of memory: Killed process 26068 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:35740kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1351.301278][ T1118] oom_reaper: reaped process 26068 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 15:18:45 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000240)=0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_rr_get_interval(r1, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xdc7535051ca1c41, @host}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r4 = socket(0x10, 0x80002, 0x0) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000a40)="03107722e50cb5f9fdc63da0876e54cc39a7948d0f851e547ad9fd8c5d29c740a2ab27f9127ab20d818c18eb8fb1dc5cea3d64a27c2c2309480cb0c4411f979208ba81278116f940f24dc493f0c0f0f561d05d0f707c244ab4eb856b042cb028a68e567c6876b7486163167a5145f468122b3bcdd46343ac3b73381fa0b66b6775c64df844734d724e248a37fd15d69455b9d20978dcbdc10dc88cdc72ed3e920d1a861cf6049ab8daa449f444233d59b0b9428316d049aec1a8e2dd299c3f0834c98c6df7872dbbb09a56b0a859c5a4bb7a053c769ae9d6b6ee8cbf2dfaa94662f2d6e089da3bb5df1f992828b15d39b1df8f3137fc1b22d03673b2dcbc653d5d61f28f31fde5fdf2551d7661ce364c834ac8f106e3817081c85313c29e37f6cb9737ff8a226e4a634adc04d7162ce5b6977203d3ae62c0de343a6d02b2b51046459ff537275cff34c7ca6f5e36c961eb786bbaf6a12e63686e1ebbadc9140b4837f63973d35889a412e63e63898ce812324409ed848b6d36fb67e0237f1e45cc203e7b736b1e1c0190c7da44f85f95322cad10c0cc8968beb0727dbdd9dfe3f6546a19c737d9933972ad339777a5b3d124f49e08ab9a95114f5bed3980a4c7c5ba7f99e044d6ca34334c203edf21ca5993651662e32ce58c8c5f86a96be4cde2838765a8e71144652ab60714d76e8d1eb6aeba9d99945aa3d986e181b661af60f05d2a631c0e75f33d92604e112ec75720b77d2d930fc97b06eb4073672e81ba3698d2b29c3c6fb293b6030c7e92ce83808d4b411a8c620ba5aff00a6df89ac282d9b274d38060a6f85dfb06f071b6136b57c626a1c46cffd1826d4974a6cc71629a50c6ac9b2b29a60fa52a01954db2ddc406be9227d363a19f44682ac92e94392c56839f910dfa4ee7f69100dc098230c2bba797756628b25509f9dc8b684fb4532e26b90c7cb68344633dadce40b45363db95ec828e7fbfdeb26047a04c4228a05c15c0f4fbf828c9ac332de9b7f2008853fc23f1123e6c52ecd6aa479690a78ba989af567b0917c45c9c7f003986b58d004266a91f0cf10629f4536a7ca8a4d2a4be37516efeedceca04be0f1168a37474faadcbd01ed61abcfd8d196391e48eaf045b4ebf64d1b79499390be9fbbf730f6d9b72f25d3e53e3fdb5c4f4c1596116257cd06c81a4ced8a168a7a97a52b410af90f550971aab3ab76c2dcf1706fa89c40c9eb7c21d47e43c7fc02a173954a034481c1cf47cb9d24361f761e5e9dc4f282ddd8b1d3fa5765b95107fc5063d0005e65f704134bceaa84710234f2226fae20497a92ef321b33fc23d76e0ba6e4ad0551c75ead43ef12c52b81777ab8dd7aeee7526a165fe413cec30b27f86318ee0a02e2af76008ed2c5273b5d7317bfbbf1b3ff3a3064697e5364079c33db74c751318152b7c9481367b63f68ef1ce55371bf9e391ba259ea19a063ca19c43db5059cc63be59db084ba986d4cce73d54b9d178ff036af6599b1f5773f6f6faf1923140db4cc35861007e06ee6d83251bf77fdfd71d144567ba6c43e3aa6f13feafbad6734607854f8e0217089ad87c182dbe05e88e297bf94ce63485efcf83281dd3d519bdae5eba4b6a007a61b00b073d70b7ceb0aa7fc550d62f7ae272351d69b48fe830cd2fb0e45330d3029fb8b1d3854606689f30c3da1afe248ea6e84c9ba770967bb0606b27e68faed97a0b35f66b81451bfa7a69f2c2a06bf43cb14c6ad6c1d9c840aa676c061bc4ecabddb42e72ad2878df569aee085bf5e69aec2393358168a5f80f4073709e8f2e176bde05828fcf9870dfd22f04bc1749f1cc6341baaa79a3706c85e541e7496441f9589b4455c58b88060e35346079d5543b3a77abe3b66c5657cd03e2b6e81b82a084a1e8ac4af21020f4e100b88da3fa836782a09eecc9233d3aba24e8ec887d14d2350029d46014d2890d9e1380ab0e4d77c6f88e23bfa8e678876549c5697e7e88836b933aeb7542f8f45654fc3ad4bf79a2af63150d038e7d7b15caf0d343895a993a20108cffa5d0198bfdaa26b7b06841c8d6de2014dae82f08e9152a8930ad593a5e32b4c2949deae811a7e72d1b3f7d138875c2d5ccbecaea248655d18cda794762de186eb705fc7d86e1ca29ace39b8ee3ef5d34c9ffe1ff2caa170c94cf272adfaf5bc7ab4f03b0e67e4a9c623c3322f87aa4d7610c24e81c34c2d6c97b51b7e04bdfa2b1a87216f466d095d0daf9ca6e4c2593753260a8ea38aa5150fa55b79e86bcb3ee3c03435c7925d3ce1697bafdd8c68792567044f6467f7250bb827c8430a6eec2ded5c1608988cb58642b0264e72e3c1d1e339472e067e96306483ef8928eb5028197dfd940bc646f11bac347e0fd43d64276fb45c1805ff0b6f882878029536b48e9bff87560e74138146fad6618124e34d330939883a3d0de2647b165079b0e26ce638dd9e5aeb14d812f541ce1127ddf08eb637357f33458af34e23820429a1c94f96406f88aeef68f083092ab481f9c582d51888183db7f69e2944b8f8df8a319df23ba510059307798c05a60bc32d335935fbff955d158a7b46713741e4054cfc5531171742234521390a98c89091eae8ddae012ad4afe4da7f2e72b7c2d643bbb9ed1d29775e32fd71f447fccf362ada2d38a9191b1d49826899649a65ac25b2c5c3f384bd691752df527a01273a820bc0bc5cb8224f4a980c8ef6f354a5353930d4834a223dbb12cf564e9e58205634ec7f4c25ce811f9670d3af01d38b8422f88e9bc03c67257966f50a4678e266dd1ab80f374b976393e440e7beb9b5cd2e7b03fa7d01a96d7b56a700eed14958c1829f757633634b915693f92230a71365ce89d47166cd708124aef3baebf16315fea384982e48730b019bd925119382756d8774032eb1d4840c0b5606a7527ab02f54e4481aeb26ad5cb751df4591dbb473b46ed15954f6c2f2a29e840dd0b3ef34ba8e2fd4e9c7cb4f2a917448e069c346fa40abe90e58c30974f1bf47b0f636766b6dd67669c0d0e867a0b2b1bf71293211e27f3cde5f691a02d6dabb37faa77611f1602c727485678d5c952bbe5be1422db5b9b5c1dbf17cdee83e567abfb3eccb899859d789250b3b217d7228649bfc8edc791727fcbf73fd4c28374a8fd3875075b0cbf49efdbc7153f664663e8ce5b344c4cd9e5799d25734b9909cef045c718280ad762d5cf47f926106fac756658e55bc774f0f800f567836966816d7b1d68fd38cd655a90937343a7f7a8d52ad44b1f8abaf9f7de1731cfe085ed69bbee5b1a10101264faa5c8506e91448b38dcdafdf5cf2fe2bff2ac889ad361081fba923a226e45844e684a6b835c7104a3f94432d0f3dea4ac479ef137e0e733edbdf028e63dfac7217c26dc139894ef8722b7b73797dd35ce69e6373dfe518b72531b74f84c759a5da4154caeff8244fe88d2933936193bd800055ed370697398f43489a69aaac5b1fef86ab149a3669a0f9e4f0e68cd50b294327e0b39cf291c4a597e79650ba6548d897b1c45cfd45978ae53319d3577e4026728b20e661ff39426b670418265418d94a895ec5d62fe8dfcbb4ce5888eca3430dfa916d2fa3c5a1b4243d96e57053be685bb21a9b0f564d96cc4ab24fccae137dbd1cd647a81abc8bfd901f4373ced931d6b3c58d419fa952b34a6e7c7ce6ab3b665041e5cb42f343d332989454bff84d0920c0abdf1bc02a9a7fa7658ce3ea4f82b9a8ed0efdb42c61758238ebd6ad9ef0b6f083d0c64fe221303863a88d7dc91523b4397e4d6663965ea01b3004486db905aba98c6b941300948b8a4c4878d5529b93e758fa66bd0e2d5b2cd2d821849edd90c9ee23dfff2198b27da5c001aede6c1ac0bcd50ec05b5ab76dcd62c9f5d9a034c634a3b714c4b5e5b9c4782fb342e9bef4636788fb01b59e68cf0b9ccb9e398cc7a42ceefc2138e009a332f117a1040e89b2eb6268158c577d9417d4b0801305f92c22a22adb5c3a46597dafd69f9631ee225fdc0e52c0e9affc3df209d2234b533d6b5f71499be7a925caf382c273a2d9d9c32239f02977cb70ec791c425117984b59a8bfcb224228a3ab282ed36147985db59b93a770c5507eb42814befd36fb9a53afbcc81105002a5ef39b975f8d8c32c677f0e33266780df50274a2296c77c74bfd35c0995ccc1a5adcc21aff263d95259f3639e4ecc070d0ff311b29bbee16ed3d93cc4c07a5f14cb744f29d40dfa5bd365e5301453495683dd2e857ab0342e8508249d93e04445bd64dc5ceb8fbeb666af6a99c0f8b9415cceaa34b1dfedcf080cc9e73594bf8cf5189f2a4d0c656f7757955dbd53b1982b9ac2c3b4a782aacd0535ea2515296d74fc5741d1597cdc1ba89b13c069f8f3215619afc838775ad451f18361857f022a08d3ac8854a9c7fd6b68551b24bc20f157cd18849c2c2a98ed70848b2547eb3fa63adaf80cb6dfd1dccfd5207c28c520373d0fdfc46feab4c67de69b081fe8221d5218544ef0656efad4ce75488cef380ca4f6cdcdf2bec193b4b51aed36eb93068d4e40f37baca8fd078692db17c02a7d5e2db9b0549654039b5e15a69a45b1071eab416baebdb19af094e74e38c9edba7fbf3112195f59f679e9b64edb203215306ac812950a94be6d0e9f46e188cb98f43717845677f796b8b25165bd41cfb1f76372266f943bd9ee9f9903c141a43f067837ecefa26f6971218497b0b2b319808370bf74d397d3bbe06001ec560dd1975b8e34a4b74d68f4fa6e5db07aee5585b59f0f6ef0ea846d4b6aed7539cee4ec6c79039777b7bf7ef655b657ec316b680e001fcbe2511a4635fc6567c43747a86a3a8acee0017e919279851302c28a31a12dc1ea6dab9af28b819bcbff09c03f87ce8724a55c8293934808a53b276434de246a6925e261964b31d2fcfe7c572b9ec8c4a91637a4af2ba81c15ca4218b473a73e8bad508f7aa7b41c91dcc6fcf7f21bfb11e8b87e1b01e4e9f32803a72f7898f53e81de68299f50372e2b487d37c631448754ddf1c703da60ec8f55ec48e69af0d6af6b5b34077e5972cd34e06492225495436e779daf19f9178db5f469db863147c208559a8675cdee3390e29ffb34a4edf9dbbb704ec1a547aabaea2d83ea4ceb0a66b702b5f3289f0d49998a36948ddf77fcb36ba2e0297a6a516d0f3a78de730ecf4c1c3b49074f8386f32f1cb583ca98e887046c4b26d3dbc18e8979c4b667ea889d9152fc72793459dc39f9d9a51cbebf9d1e5311009df608dc6dc8dc774f2111c5d7afb705289693f57db87b5095021352e6227178bd3ba5b63223aa7ea37bf20679cfa7d0e236028027933717294074ce7516b0d305b4fa19154b410b607fe38d4c914971d92c35a89dfd468ab40014921e448d8622c231d5cc78baacf12f52e4775adef220160cb41a0197ee872bb306ba4aad189e24d4538ba5fed01247dd5f0c85fe52c3054735b39beda090a1b8823e51d451ee2048c04c680ec9ae82b849ca0f95a32e1242af21450740c4e3a11f6a531ab16a6ebf40fdfc5d04211a51eb5205a5a16a1faa58e647266781e378416da1d3f9b9029c0776a0db2a57626ba368656e377de0ad58ea17ae696eb5537d9700afaded688ade91d909489606432ce8884186396bdbf449e6cc73ef06e190bb2d650ff15902fb037dd84632e71c5988e287d93df5834d216cad795fa5f98399f355bbd3a5c1332154552284d4db6659f6b17bd30f753aa1e4d366b1bd0276219499eeac00906986c268afb09661ab", 0x1000, 0xfffffffffffffffc) keyctl$describe(0x6, r5, &(0x7f0000000100)=""/158, 0x9e) sendmmsg$alg(r4, 0x0, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:45 executing program 3: [ 1351.318300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.324096][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:45 executing program 2: 15:18:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x0, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x23d24b85a3eb91e3, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x204082) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) r6 = gettid() waitid(0x83b895581628fca4, r6, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYRESDEC=r6]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) 15:18:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x13000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000180)={0x2, 0xf570, 0x20, 0x7fff, 0x4, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup2(r7, r6) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x21, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000680)={r9}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000280)={r9, &(0x7f0000000180)=""/217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="2d72646d61202d696f677e6b2296d8be19113e1a3b4720"], 0xa) 15:18:45 executing program 3: 15:18:45 executing program 2: 15:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(r2, 0x5502) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x12715, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:18:45 executing program 3: 15:18:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x2, 0x395bb315fc61a60d) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xffffffff}, &(0x7f00000001c0)=0x8) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x6}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:18:45 executing program 2: 15:18:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000100)={0xfffffffffffffff7, 0x7fff, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:46 executing program 3: 15:18:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x80000001, 0x0, 0x0, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:46 executing program 2: 15:18:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1, r3}, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:18:46 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x5}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x81, 0x1f}) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x7, 0x2}) r6 = getpid() r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) read$alg(r7, &(0x7f0000000140)=""/94, 0x5e) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:46 executing program 3: 15:18:46 executing program 2: 15:18:46 executing program 3: 15:18:46 executing program 2: 15:18:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:47 executing program 2: 15:18:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0xda3}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="df6d09f2ad0dd84e28abbb40acc180509a169a62b16c48fa5b109f8864380546d223648eddcfce45d061578639b71b136cfb264073ce7f28f0cdb34f098129711a07174068a610aba7557991a4815ac4b9a4855dfc7ff96aeddc640234ad11d609e96188fdb04a6b3f701e87493dc9fa58f8d0a6d2af9d74d79a7bdb2c5720803c03c53aee4b55df62dd2e8c05885d3955", 0x91}], 0x1, &(0x7f0000000280)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x7, 0x7, [@remote]}, @rr={0x7, 0x1f, 0x7, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xb, 0x5f4b7c39, [{0x1, 0x5, "e8cadf"}]}, @noop]}}}], 0x70}}], 0x1, 0x104) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:47 executing program 3: 15:18:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:47 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x1}}, 0x10) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:47 executing program 2: 15:18:47 executing program 3: 15:18:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x200200, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x5, 0x0, [{0x80000005, 0x1000, 0x5, 0xf154, 0x8}, {0x0, 0x2, 0x0, 0x4, 0xfffffae7}, {0xb, 0x8, 0xc2, 0x0, 0x1000}, {0x4, 0xffff, 0x800, 0x3, 0x20}, {0xc0000001, 0x7, 0x7, 0x7, 0x7}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x440, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x4, 0x4, 0x10001, 0x100000000, 0xa2, 0x3, 0x480000000000000, 0xffffffffffff8001, 0x4, 0x9, 0xc5, 0x7, 0x0, 0x7, 0x4], 0x1000, 0x10}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x2, 0x8, 0x4679, 0x9, 0x1, 0xfff, 0x4, 0x7}}) 15:18:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000000)) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000100)=0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)="1c9b9e5be5559ebfdf80d320be893248deaa1bbc9a01567d14190af4554d0b54f6496776c3adf27de74ddd7d724187de481bcffd4b3a7df477807aa756fe3ee0d18a6dcd85f1e7d818e5a7d0218fad", 0x4f}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r6 = openat$cgroup_ro(r5, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT(r6, 0xc0984124, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x272000, 0x0) fcntl$addseals(r8, 0x409, 0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f00000003c0)=""/249, 0xf9}], 0x4, 0x5) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15:18:47 executing program 3: 15:18:47 executing program 2: 15:18:47 executing program 2: 15:18:47 executing program 3: 15:18:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="91b223729c73fb4a04818f7173721de6", 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='system\x1a^)bdev\xd3wlan0,{}\x00', 0x0) 15:18:47 executing program 3: 15:18:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:48 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)={0x4a, 0x6f, 0x2, {0x5, [{0x0, 0x1, 0x5}, {0x18, 0x0, 0x1}, {0x48, 0x1, 0x4}, {0x10, 0x3, 0x1}, {0x11e67e951127dfdb, 0x2}]}}, 0x4a) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/231) 15:18:48 executing program 2: 15:18:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x3f, 0x0, 0xff, 0xf, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x920, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000005c0)) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x208100, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$caif_seqpacket(0x25, 0x5, 0x1) close(r9) splice(r9, 0x0, r10, 0x0, 0x4ffe2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000001c0)={0xffffffff, 0xc, 0x4, 0x20000, {r7, r8/1000+10000}, {0x2, 0x0, 0x0, 0x20, 0xff, 0x9, "3ee1b4df"}, 0x0, 0x2, @offset=0x4, 0x4}) r11 = getpgid(0x0) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f00000003c0)=r11) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe2, 0x0) r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r14, 0x4068aea3, &(0x7f0000000340)={0x7b, 0x0, [0x5, 0x800, 0xfffffffffffffffe, 0x6]}) 15:18:48 executing program 3: 15:18:48 executing program 3: 15:18:48 executing program 2: 15:18:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="02160305060000002bbd7000fddbdf25040002004800000008000000000000000104000000000000000000000000006d137a003f2a626486b063e677510361dda243905e495bed9009dad47ea4bc3f923b05b80710d885782b2115bae039f611f8c52d44ea6e0e98c6235a5d2d6c5e1831d509e5344201f0fbc687655d032628cc92d300dd33c1457de78b8cad40640c6775fa497aebf1482e1f0c4a78da38fe683466bd89a427ea1a6d1725d5711fcdf366226ee96f85928e5929c5618f793b74909ed9bf047c7eb37600"], 0x30}}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:48 executing program 2: 15:18:48 executing program 3: 15:18:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x60000}, r3}}, 0x30) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)=@sco={0x1f, {0x6, 0x0, 0x5, 0x3f, 0x3, 0x1f}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="65d746cc5e75d2b2354520becfa3b9860dab9399cc00dc8aa27790c9ad1b40dae509a46d5c10088fdd77e85cc0e8cd85df3c0d21d605812d11ebf44ace6ee18768f8089e118b5ad7b40d9084", 0x4c}, {&(0x7f0000000100), 0x14b}, {&(0x7f00000007c0)="fe9ed7b0be256f33f7973ae1b1d615e8b36e326c2afab5c8f58db76a11cad556be27ca1819ade0635757b32ae49c46143f01dcd316c86f01bdcac7c50047c66b109391165420968c2ea30ce2ff34571f3526be6ea5d2b2c2084ce8", 0x5b}, {&(0x7f0000000300)="eaf13d1a90108d49c49ac9147081c1f2cdcb120e676da33799f95993773c8b1910afec1db24f6fcb61e255c7ec673ce26db794deaeb4565145b79371eeb43b440d3c47082f6088c38e28ff552ddbddcda902e4021bfa57e14033cc3d4c39b2fe34a31c95a176729f1ccf4676ae36d9eaf69730458df9c0066c48dae8f49d", 0x7e}, {&(0x7f0000000380)="a47501960a553923181a5fe11c0e4d7c00cecbd16fde2b7aaff718c59b76234c235888e7ff4704006931e0b79a08143a6d08d5b3b45c2a821f903f70fa5c7ad06adb4ccac9fcc9ef07fafae0187f15233a319498a1adcddc123b85ca977902c05aacd6a6e29b7d2fa5c1d1456c4c1438c2d4b941501d8922d883a9e3091acd507e5cc339b9d9633c789aa117e88e70b2d3dcd1406ab65690e3996e08fc1c093ae37ca96962c947fcdcd7b33f9de211dd4eecadeabe3b3cc5e09c674fdc75", 0xbe}, {&(0x7f0000000440)="e8f6730282783649674353565fe9c82e09269293992be31bd89401c239679e4b9dedd5e9331717eea86b58b1e31333822069eaa1b6c6ae0753be61712e6bc4fcd85d80b73f9801425477efd0d1e1818b1112975d06c280987921a7c49af91b1d58d11b69c594819fbda00683e7dcfb93f0b7fdb9b17d4a21270183702015bfcd07d4d58f3fffa112e83d5bb1d4428475d8375cd258d940d864bae3ae9e5f51305b08991acfbeb9d05c0af4", 0xab}, {&(0x7f0000000500)="fbc9f9be6100b9508bc029aef89b65796f3760ac6aff768cbc1a6fbd8a95e030b504ed8f3063b48f2b3206520b28b363c671fba6e9591897b9e73b4c99ec98621e7ae4587d7f2a3949b9a79e7840e4a87cede17dc43fdfd2c9f483a94a4f10cc17e3d2a66418d4353a3f954ff772d449da0648993620dc5dc6ac304916c2b40632b05a045b7921cc1071821fa8e3cbf3c320a0d3b95a6c17a803ce40269d549b2259db8611d709854f95b3422c2a14de1dc8944072202094ea7feda7fd859244fbff2074cb734a05c74edd0adab9811c801728922d6f59cd4d9097d6375d5a17adf0", 0xe2}], 0x7, &(0x7f0000000740)}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2000, 0x0) renameat(r5, &(0x7f0000000100)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:48 executing program 2: [ 1354.662312][T26261] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1354.718943][T26261] CPU: 0 PID: 26261 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1354.728633][T26261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.738693][T26261] Call Trace: [ 1354.741995][T26261] dump_stack+0x197/0x210 [ 1354.746336][T26261] dump_header+0x10b/0x82d [ 1354.750758][T26261] ? oom_kill_process+0x94/0x420 [ 1354.755700][T26261] oom_kill_process.cold+0x10/0x15 [ 1354.760817][T26261] out_of_memory+0x334/0x13c0 15:18:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x0, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 1354.765500][T26261] ? find_held_lock+0x35/0x130 [ 1354.770275][T26261] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1354.776090][T26261] ? oom_killer_disable+0x280/0x280 [ 1354.781311][T26261] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1354.786873][T26261] ? memcg_oom_wake_function+0x700/0x700 [ 1354.792520][T26261] ? do_raw_spin_unlock+0x178/0x270 [ 1354.797730][T26261] ? _raw_spin_unlock+0x28/0x40 [ 1354.802598][T26261] try_charge+0xf76/0x14d0 [ 1354.807031][T26261] ? find_held_lock+0x35/0x130 [ 1354.811814][T26261] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1354.817377][T26261] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1354.822930][T26261] ? find_held_lock+0x35/0x130 [ 1354.827716][T26261] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1354.833282][T26261] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1354.838838][T26261] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1354.844218][T26261] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1354.849793][T26261] __memcg_kmem_charge+0x13a/0x3a0 [ 1354.854918][T26261] copy_process+0x79d/0x7230 [ 1354.859534][T26261] ? find_held_lock+0x35/0x130 [ 1354.864316][T26261] ? __cleanup_sighand+0xc0/0xc0 [ 1354.869260][T26261] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1354.875421][T26261] ? __kasan_check_read+0x11/0x20 [ 1354.880451][T26261] ? __lock_acquire+0x8a0/0x4a00 [ 1354.885394][T26261] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1354.891377][T26261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.897643][T26261] ? debug_smp_processor_id+0x33/0x18a [ 1354.903114][T26261] _do_fork+0x146/0x1090 [ 1354.907369][T26261] ? copy_init_mm+0x20/0x20 [ 1354.911890][T26261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.918136][T26261] ? debug_smp_processor_id+0x33/0x18a [ 1354.923604][T26261] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1354.929772][T26261] __x64_sys_clone+0x19a/0x260 [ 1354.934547][T26261] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1354.940535][T26261] ? __ia32_sys_vfork+0xd0/0xd0 [ 1354.945390][T26261] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1354.951037][T26261] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1354.956329][T26261] ? trace_hardirqs_on+0x67/0x240 [ 1354.961364][T26261] do_syscall_64+0xfa/0x790 [ 1354.965876][T26261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1354.971764][T26261] RIP: 0033:0x45d2d9 [ 1354.975679][T26261] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1354.995291][T26261] RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1355.003713][T26261] RAX: ffffffffffffffda RBX: 00007f4c4048d700 RCX: 000000000045d2d9 [ 1355.011712][T26261] RDX: 00007f4c4048d9d0 RSI: 00007f4c4048cdb0 RDI: 00000000003d0f00 [ 1355.019707][T26261] RBP: 0000000000a6fce0 R08: 00007f4c4048d700 R09: 00007f4c4048d700 [ 1355.027714][T26261] R10: 00007f4c4048d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1355.035705][T26261] R13: 0000000000a6fb7f R14: 00007f4c4048d9c0 R15: 000000000075bf2c [ 1355.076170][T26261] memory: usage 307200kB, limit 307200kB, failcnt 4788 [ 1355.093003][T26261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1355.100280][T26261] Memory cgroup stats for /syz5: [ 1355.100398][T26261] anon 276463616 [ 1355.100398][T26261] file 151552 [ 1355.100398][T26261] kernel_stack 5566464 [ 1355.100398][T26261] slab 9920512 [ 1355.100398][T26261] sock 0 [ 1355.100398][T26261] shmem 65536 [ 1355.100398][T26261] file_mapped 0 [ 1355.100398][T26261] file_dirty 0 [ 1355.100398][T26261] file_writeback 135168 [ 1355.100398][T26261] anon_thp 257949696 [ 1355.100398][T26261] inactive_anon 135168 [ 1355.100398][T26261] active_anon 276439040 [ 1355.100398][T26261] inactive_file 122880 [ 1355.100398][T26261] active_file 45056 [ 1355.100398][T26261] unevictable 0 [ 1355.100398][T26261] slab_reclaimable 1081344 [ 1355.100398][T26261] slab_unreclaimable 8839168 [ 1355.100398][T26261] pgfault 171633 [ 1355.100398][T26261] pgmajfault 0 [ 1355.100398][T26261] workingset_refault 198 [ 1355.100398][T26261] workingset_activate 33 [ 1355.100398][T26261] workingset_nodereclaim 0 [ 1355.100398][T26261] pgrefill 2180 [ 1355.100398][T26261] pgscan 2164 [ 1355.100398][T26261] pgsteal 282 [ 1355.234940][T26261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26091,uid=0 [ 1355.255147][T26261] Memory cgroup out of memory: Killed process 26091 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1355.274938][ T1118] oom_reaper: reaped process 26091 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 15:18:49 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xffe1}, {}], 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000000)=""/105) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:49 executing program 3: 15:18:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1e}}, 0x50) 15:18:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000016c0)=0xa0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr="562f65d813892106ab1dc2f5681a7f28", 0x1f}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="cf3e5b18cd7f3856bd82b8fde2aea5d012527014ac113daebe6e4cabc5f2d2f3da10b50baf", 0x25}, {&(0x7f00000001c0)="8fbf7c89ef6f3dce03e1b1bd54991ca6696f5e8dd5f4dc988f7494fad7b8ab376a172a3c0e9b8b4ca0d529ba62a2600f6a1873244f70db0db968aead81cc54091c74d404903cd83c68e6b92a2c6e00ca6ef5b5df647e4e5c08fbd0d00d62b7c62380b860fe71266bd525c202a20545b8f0206a1c7a9e20d93b875a5587796f3b72cb05f0ff7c8d4b54db0a15b35cbc5228fa662493dd95b01e8d6dcb2647cc3ee4c50cf522a04c844f7fe5bf5cd1093daa49ad20b05c94a15f92780be5bec719ef8bec6474b8ec810bb7496f98d5c8bb78783c6225af0506f7909350620f3e", 0xdf}, {&(0x7f00000002c0)="c66421829255f49760e59e2f861a46cd50cd8930825e95f7a814b0087ecd023beaa2d86c848c6c2256efaa6c731724b93e99a119800fd9c55116012fc14e0244976c2aa7ae54bee5544cad4bc0ca131932796046a6b396c4e08fc73d406b1a73c4f0825cf68b74936b7cfb86dac47b35b3ff66f5c289a04e5d0b2e8d4ca20efe53ff3a520f5837dd79748c4cf5f2cbdc87c83883ea528cebdfa23c99173e7d1d64548b8936e7fc95e48830f3d7876c48d4eb25417d7d461b627073b783e41ebbcd6702c69fda2d0619fa7867acd8a559c055700d9194", 0xd6}, {&(0x7f00000003c0)="3037360907a6deaf6aa955837ebccda99ee057de950c55ad5a4ee43d7f1065e10ed1284f043009161621292c84ba6ef44511d87e0f5d70d534789cd423189311480a267c228eb46d0f8e63e006dc7e2882bea7b3380d6ebe306544c3666afa446646d9d14c2aaeda4444bedb7578f44479124b6c972b10efd329cbcc7d9219fe21cbe6a27e4dcc1614270616", 0x8c}, {&(0x7f0000000480)="d88ca005ebfeda", 0x7}], 0x5, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0x88, 0x29, 0x36, {0xe1cf00a33e91f5f7, 0xd, [], [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x38, {0x3, 0xc, 0xb2, 0x8, [0x7, 0x7c8c6cda, 0x9, 0x7, 0x7ff, 0x0]}}, @jumbo={0xc2, 0x4, 0x80}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6}}}, @dstopts_2292={{0x1040, 0x29, 0x4, {0x29, 0x204, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @generic={0x9, 0x1000, "bf06172331184f9251601245acd6dc2f915a1a7b946a8e7a78fe972eaaf3b7d94b1227391b8ddd1662d46966f8d4c42023a2fd526e191463276b3bd51e6b22053f9855890e4086c0a3c3f9d333e852c6cf1eb36add3c0f954ac46610fff349c5d3060c45a68950e61b6df1741156bb20c115f2ff9c515200e94b9d99a045aa64abb0af1c88951fd2ed3ac50af7f667e1bcf2f11949870b458a22c29060bcefb39d8bbc690ee1669836faa9dab6d1a26ba8842018849ded0298793c6f79dc0a77664f07456c7f8608c3f51be1c410bbf20b83ba273eec2e49772aae40b25aea871f34c10b741c2b1590f02ed3d584f5a85a854f7163735122f8ace126f241b1e906519918adc84dbc6c178c6585b33fb12b54ea9f5324f0d6ff9935fd6aee545975adbc8aee4bee739833cbfe3071929107512b21b28339b6bcbc94bed7056559d3922f2e8aa5231c09051ba67e73efa1c10d42f469661e1cccf87154221725d1d734ffc23b058b14c653db7c312820cd7f42fb51567e085f438c4326edae2adf3955273b0ac2ce758f9eb9ac280426b04129d931da304958e05cf9f56f3cb9cd4cb73758602358587038fc06d41f98652b91d0367b594efdc346ea7c03819e20fec28242e46b406b4f649051977ff2c37d6e2894e6716a84e32a14a4c419608b8e3522d5bf6c5398cd6fe951af561db0f2714173b0be50e027fd7c57c7ec6e9475265ca09e9cf7b22deec5778ab5113d11bcf6dc5d4a70cf135c59412aec492f00d79750f4d821e5d240e59a24686d3abe75f34b6962cde04d6dcefee480953a670428527ee2b0090f1a7653856e7ecc1349035e6308941d441a0045af49a2aea7d830730cb9f9707dde3e1e2afe47b72bf1af932cca8003135d818670e8026bdfa77c16df34956b34acf33bfab1cf4d8237a895541e25f5e0ca73d7174b0a664896b3e87261f0ec1bda2f2cdec20388ec0021159470b9a31dd649fcfa1ee46c6b38d677bfcb40696bb5bbfbd3bfa26035f1c21f94376b29b7edfd309741e49e742c8ab129064458bea8340c9b2bfa1c7e804f6c5ccbb2ddba8f004a0e9f0abb3caeda4f54165687dbd0d733286a581718963ee13e8b9f8f2b695e3e54952c788c1802635be35334c52e3e1e51e5de54b2bbffd53d2221990f808198f40ef08c6e7f80686894785ed17c40a382d929efc0b7768cc5d005a9b5f14168943758841dad61b126b1c40034d17f86f8eefbce0292788398fd90f809b2dca90d7f57bd64e87c9edf1b3d1837df5cb1f8037a09bc0bc82e9a18ea5127c96bca41600ba3e0b165323a773b2ffbfc71f24b06eccb738a8a1d4e917dbde48d2e51440393dabdebc25d1a1f847ff7f9537b251aeb63af66892df6c82b83f6aedba9a9fd9edbb55c2ccce262acfac870992535bdf125c74d5e65e1725e25b5b89ea44854f947d3b6d8af90b5232216b795d569a704364d0de455a9a3131acdc54ddbb5c68a56da9bd9234c7ef6eff3bbbbf5be4758aae7b4ace8d5c668375edad30337b1716c89d591be4290baee08f9d231ef12bfe2feaff33026b9759f5b4dd30890f06d9f161c571528bc8232977b69cc1da67469411489bffc9780d85d8e12aa72421efca599e26c5cb9e26239ef4d00117ab915325834e600adfb8b8605dd41328d3ee20ee55d46114a22fa6c9e1cf039c02c1eece30fc93bce958049fb41203bedb494a4a3fe97d64701fa9c23ac594f8bbbbecc6c7eef279a2397dc797fc3642786cb0a2b7d68618b336030e9ead65b794b20125df281eb08588dc53b48b1713f2439bc7a35d0c6d15f7affe4e57c664bdde547f4cb6c1f495841f960b390f34d14706e2484a421e90c7ecf89c1209a5726bf489cbb6d5ab8a7aedcf1ec5236a2e5ccd77165d6ef191f27df93e66e2f32ceefedd842ee89f46e757e0943e1d0facefc91d8ff47477d4050703381fc72e807863555fe96a0c84cad9cf5b9bd614a1f01824377e4a350cb46069bac648f5197d1b7a46f1f8f7d52f2e3bb87410f02072895b3c09c7b780bcc07c6a95f1a5c7dfe998471221616f3d8ebad06b12891454acb4d95367a00cfc951c8813a0f37bcb7261c27969466400aad78ccb9d8a7481fa7480a5e0a64b35a76392a78c6de3142d6d35a17814bdd5b299bb32b36661c2bd277902cf926375389372d93b85d0b98c447988461438e43082e362980fa259ad00952e68ca4c8503a4cdbd9abdfb1c3d7f8517a6d4d6d022dab326b1e3832db1c75689dcf07b3701e7617211027c8ad1935d747484e3ed4df7d372ec22879a1a6c588d2a3ad17852c13deac88d5301b09762ea8eb5a980e16be0e36c3fc3ee2220e784b1497b73f6957eb7804b9f406b62f2b4cab0b872a20d99ee41600be21a64963b2b04a6c5becb5ed7754cfe405d888e4e756f018671adbcf394f88fb941bf1999adf99498b53547a24589dfb865e540d91cdfbd82c586472f47d2e3361510989835077c97af9fa79de3492bd7b78db2f0b0b05ef3960537a5d0605c13f27341a6b62a34649f9468cecec6385080fe240cbfb8ea6804ecb5869806df2b03bc2de6ecb623e2b67b48886b53bb9f1074ff87980af3ca4c9ba103f0131abbcee5461b206a0ae9dec17818de4695945390ef654a5289479ab66278861356084284f059d18a7c83eb9c4fa9e7aa00ec1967132a81bfcee10e5e0a4d2f99d469f3f8d1b5091f7d96898d7dfa88de9bc877edd7bd303bc45933055aa211aea86cc781c051b66ca3367bd0647cd17e4f0abf9e937eda71ebfea642f97be7122cb76ddd7d02b659641899a9cd74221570f30e919873a622b46e5810c12db6e779f7dc9d639b0e19941dec705c8024614ffeb06c0291801a26aac35813c88e03bba532f3978aa8316d2f60009b295b984035ac499573182557c31f7fff8b47e31ad5056a418bbcbca58f849d00667a03c2419cd635972d50b6deba3336e612efe5b603a12ad02dd340ab2ddf432d71e3274828f486ce3fee3fbd7389f43b7f400942cbcc93bef7adc7b1eb0d9fae0e56dcd25cbc0d367e1a7ebd16defee7a989f3bdfcae857be4de34d285dc1b94fb2ab601d989108889dfefa0613cb43fde1c0c5d9fce77a4bdab62c64094777ba48e3979f014f634e69a59e12e5f5350af69186967182bbdb9abea3ecfe43dc2093a23ed4ec0c7fbb86fda55847a9d29a3f6039313f61649bd2196baf3d6c851795637d55acf423e4bc69c361b866e9df030435a5346a73d9626efe566122f99058c44092dc1320ce9b9c7dedd2cf43021db4181e4c5e3336cacce1cf867124505279b70ca56336e6b6a3f6b05cbbc58395d39e762256e7a9ea9e8567e51c11a2f3eb7ad33b6a1eb908cd6e6a06575139dce0729cb6aab4cf87452df41ec48c2f1a7909a40efd94367d215dcae908437b4dd81d08e7aa2e9fca1fd25285f676a4b55191432fc361d86e898816e26d01bb805d674e72f9440f284c9ce61e945927673b05ffe7f23b1f736f2fd8cb31cfd8efa968bfef07ec7cf632e457d7df94afab05521c08a32bd6d889ce89cda316d6bdd9427e62085c11b35f663d3027526084fbe8b80ebb35675717ac9b05e78da0011b30f571b11089aeefd08167003400c4f4b02f8e6c571af822596386f9e06bb3233b1e69ac3f8665dd251889a912645a2de50137d498956111b262dc984c93c7f1f680e2df14187ff782beb525be0b9794bfa5364c6ee84b544abbe921a5f1ddae3fa90cb315a1d0dbc46e74b9ed0bbddf3b37350ddc3624037724f416790a60c7ca5f4827b86001d619a69bef70e4b872f1ea6c401d04ab370a7686f457a4a210b1cc56ddc63f0d793b660a154520edf4e0f797dedc43f32423d486624b4d28fc67c2c822e2b6fcef8de0b1c511b545bcce3480c36fcd24e2035147c6592c4fe6e51c045f6178ba25b12b4a87f2c9811df6da0f6b90fa0fae667909732433214ad4e4a089070f1e847cb6e37ca2d68399bb3145d500792f4d02b6779d0a2b914a8b21b14a48f2d89b0e58a66219740ef1f8282ae868c5840a366cc15c4451c5945e24639c6f6aaeccc1efce61b0e2f64447a37506c3d08143583a259f04c10fcd3af30fa925d15749aaacdee3b2fdb61e401bbd2d82b03d4ec9963eb7bb0abfd5fe87956943a70206d2fd951866cc8318d470c37e0d6e04f8867662607306b856e8144053ea07a3319fef9297964b901de4ed367497cf0c7be441be5c4e2100609196a14bad638820194299129266c731a076bf5d595fd759b976e8f5415f8e63c5b6deaf6239ecf6358948bd6a0f7ee12a15e06638d001423c94994b427327e86c69d4537ab946ac94850d629b8c6f2649bcd7dca97a7e4e5c48e8b3559280eb58aa393251f6ab13a4d9950b4cb630e46693c4dd21217ba725dcfbbd38d64e506f5b3087f91c25ea48669313bdc94cad4c6de09804c7825b68c6d75c01b1fd273ab954859072bf52c5c03a5aa0c8b5bffcc96067c41ef4b0ac30a5be4e6521f13caac8fcb3e78e63665340511c1638a5d7365b2efea5b8b468ae96e2ab2dbd7a98b74fd7968d6687b73c9b206b0a9b77fc1f60af3b355bedec8811378874f9cfc6f0a14b1667abd1ea58fbab670c013b98c6a47e82d266ff450d58131df32e9191e89d78be5b35f100546658d9f9d17f4d31f7fbb30d71f76cbb7d9f610d1f30ad80f2a6a545493ca947aade6c306807e00447b0976ddd6a811be859afc488d6e912dfb992a5690b2e0d0efa689b4f4f1fd86ea8ff75d8ae65eb9fef379c9d16016bf32655db462dd27063ee86baf4442b7fc6c08109ca8c6351dab847de132191edf6e7a7234bff124c437933844ab8587f8e55febfbfc1083c5e4585311241e1ae14a8599cba02085393bf335c571a19679331c237f2c4cf28af84a2e2aa97c93ad2cb99ad727aa4370f46c4a272041d0dbd12a718d1bec1dddba0e27ad8d56b0cc98681927f0699ca6bc3353e933aea841e24fc54b574672910b7b627e2ffc32d2fe82585d838fdda26bfdfa00b02015567aae7c253bc6762b4d95e9250b9938e84e102563e10e6ff5214ebf12a041de4f58976b2c02d7e67a3f9006c91f99e824ff5141f8ef6ac1b2d7abf77f5294ca86f39186aff238217034f59f6fe1405fe87d1e2ec6c0d37ada90afeb67dc72be1d12bf6561e83c16cbba561ada360adffd3407ac8b65f1170b47645b7055dde69c99f612672a847fbff980bb370a36392b1df4baad2649a9e47aafbb61679d4a58b35c9d543dfdf0411cb9581adc7754aee8d4de7223b2b633c6d4def8ff604a9d2d7931b09db417b9411f8c2c9adbd72924d85676a967ffc377b69983ad49fcb748da475432c373f89ba295630cfe5b280d10b8bb71cc8a77a2dcdeeccb9361e5c2e8dde3a41e793bdd2ed9d1aa3b9502dfd384d490bf803821fe4f9094cd8f33ec0175e442b99f736db89e5c1f1f4bf300bf12184ab867a120b0502a729c04200d2c87a1ed304052e4a6ded088712ea212d944e5cff78e870dc482a764b46fdf93bde53e3d9c8b54d0a171ee62b481e8877713f93c7ca6c4b28d6c9b58364f5b06aae5732377af9ca643ace8eee6fbd225b45cb32a1b655f568335a02907cd23ab155245837503a8e7f4798cc17e4c8cbe0101002164f42f298868ac6d9463b0b70971773858d061b844b611121e4fb907afadf1b1c2784f4c795437b222d4cc7910c452873d3dd42bcad7cd91c83b373ce295e784c80cafebc1780704a3778e34209fe4f8745772c1c0f778596f308"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}], 0x1140}, 0x1050) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3b, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xe3f26f8d026b6d2c, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x0, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:49 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000020105"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1355.478325][ C1] net_ratelimit: 20 callbacks suppressed [ 1355.478332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1355.489880][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:49 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x1c0000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x480880, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000180)) r4 = getpid() tkill(r4, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 15:18:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x0, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="ff", 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1355.709948][T26307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstat(r0, 0x0) 15:18:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="ba6100ed0f0057bc36f30f090fc7bd000015d57cb8d2078ee0f0818f000000780f4732660f50f066b94e0300000f32", 0x2f}], 0x1, 0x96, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000240)=0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_rr_get_interval(r1, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xdc7535051ca1c41, @host}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r4 = socket(0x10, 0x80002, 0x0) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000a40)="03107722e50cb5f9fdc63da0876e54cc39a7948d0f851e547ad9fd8c5d29c740a2ab27f9127ab20d818c18eb8fb1dc5cea3d64a27c2c2309480cb0c4411f979208ba81278116f940f24dc493f0c0f0f561d05d0f707c244ab4eb856b042cb028a68e567c6876b7486163167a5145f468122b3bcdd46343ac3b73381fa0b66b6775c64df844734d724e248a37fd15d69455b9d20978dcbdc10dc88cdc72ed3e920d1a861cf6049ab8daa449f444233d59b0b9428316d049aec1a8e2dd299c3f0834c98c6df7872dbbb09a56b0a859c5a4bb7a053c769ae9d6b6ee8cbf2dfaa94662f2d6e089da3bb5df1f992828b15d39b1df8f3137fc1b22d03673b2dcbc653d5d61f28f31fde5fdf2551d7661ce364c834ac8f106e3817081c85313c29e37f6cb9737ff8a226e4a634adc04d7162ce5b6977203d3ae62c0de343a6d02b2b51046459ff537275cff34c7ca6f5e36c961eb786bbaf6a12e63686e1ebbadc9140b4837f63973d35889a412e63e63898ce812324409ed848b6d36fb67e0237f1e45cc203e7b736b1e1c0190c7da44f85f95322cad10c0cc8968beb0727dbdd9dfe3f6546a19c737d9933972ad339777a5b3d124f49e08ab9a95114f5bed3980a4c7c5ba7f99e044d6ca34334c203edf21ca5993651662e32ce58c8c5f86a96be4cde2838765a8e71144652ab60714d76e8d1eb6aeba9d99945aa3d986e181b661af60f05d2a631c0e75f33d92604e112ec75720b77d2d930fc97b06eb4073672e81ba3698d2b29c3c6fb293b6030c7e92ce83808d4b411a8c620ba5aff00a6df89ac282d9b274d38060a6f85dfb06f071b6136b57c626a1c46cffd1826d4974a6cc71629a50c6ac9b2b29a60fa52a01954db2ddc406be9227d363a19f44682ac92e94392c56839f910dfa4ee7f69100dc098230c2bba797756628b25509f9dc8b684fb4532e26b90c7cb68344633dadce40b45363db95ec828e7fbfdeb26047a04c4228a05c15c0f4fbf828c9ac332de9b7f2008853fc23f1123e6c52ecd6aa479690a78ba989af567b0917c45c9c7f003986b58d004266a91f0cf10629f4536a7ca8a4d2a4be37516efeedceca04be0f1168a37474faadcbd01ed61abcfd8d196391e48eaf045b4ebf64d1b79499390be9fbbf730f6d9b72f25d3e53e3fdb5c4f4c1596116257cd06c81a4ced8a168a7a97a52b410af90f550971aab3ab76c2dcf1706fa89c40c9eb7c21d47e43c7fc02a173954a034481c1cf47cb9d24361f761e5e9dc4f282ddd8b1d3fa5765b95107fc5063d0005e65f704134bceaa84710234f2226fae20497a92ef321b33fc23d76e0ba6e4ad0551c75ead43ef12c52b81777ab8dd7aeee7526a165fe413cec30b27f86318ee0a02e2af76008ed2c5273b5d7317bfbbf1b3ff3a3064697e5364079c33db74c751318152b7c9481367b63f68ef1ce55371bf9e391ba259ea19a063ca19c43db5059cc63be59db084ba986d4cce73d54b9d178ff036af6599b1f5773f6f6faf1923140db4cc35861007e06ee6d83251bf77fdfd71d144567ba6c43e3aa6f13feafbad6734607854f8e0217089ad87c182dbe05e88e297bf94ce63485efcf83281dd3d519bdae5eba4b6a007a61b00b073d70b7ceb0aa7fc550d62f7ae272351d69b48fe830cd2fb0e45330d3029fb8b1d3854606689f30c3da1afe248ea6e84c9ba770967bb0606b27e68faed97a0b35f66b81451bfa7a69f2c2a06bf43cb14c6ad6c1d9c840aa676c061bc4ecabddb42e72ad2878df569aee085bf5e69aec2393358168a5f80f4073709e8f2e176bde05828fcf9870dfd22f04bc1749f1cc6341baaa79a3706c85e541e7496441f9589b4455c58b88060e35346079d5543b3a77abe3b66c5657cd03e2b6e81b82a084a1e8ac4af21020f4e100b88da3fa836782a09eecc9233d3aba24e8ec887d14d2350029d46014d2890d9e1380ab0e4d77c6f88e23bfa8e678876549c5697e7e88836b933aeb7542f8f45654fc3ad4bf79a2af63150d038e7d7b15caf0d343895a993a20108cffa5d0198bfdaa26b7b06841c8d6de2014dae82f08e9152a8930ad593a5e32b4c2949deae811a7e72d1b3f7d138875c2d5ccbecaea248655d18cda794762de186eb705fc7d86e1ca29ace39b8ee3ef5d34c9ffe1ff2caa170c94cf272adfaf5bc7ab4f03b0e67e4a9c623c3322f87aa4d7610c24e81c34c2d6c97b51b7e04bdfa2b1a87216f466d095d0daf9ca6e4c2593753260a8ea38aa5150fa55b79e86bcb3ee3c03435c7925d3ce1697bafdd8c68792567044f6467f7250bb827c8430a6eec2ded5c1608988cb58642b0264e72e3c1d1e339472e067e96306483ef8928eb5028197dfd940bc646f11bac347e0fd43d64276fb45c1805ff0b6f882878029536b48e9bff87560e74138146fad6618124e34d330939883a3d0de2647b165079b0e26ce638dd9e5aeb14d812f541ce1127ddf08eb637357f33458af34e23820429a1c94f96406f88aeef68f083092ab481f9c582d51888183db7f69e2944b8f8df8a319df23ba510059307798c05a60bc32d335935fbff955d158a7b46713741e4054cfc5531171742234521390a98c89091eae8ddae012ad4afe4da7f2e72b7c2d643bbb9ed1d29775e32fd71f447fccf362ada2d38a9191b1d49826899649a65ac25b2c5c3f384bd691752df527a01273a820bc0bc5cb8224f4a980c8ef6f354a5353930d4834a223dbb12cf564e9e58205634ec7f4c25ce811f9670d3af01d38b8422f88e9bc03c67257966f50a4678e266dd1ab80f374b976393e440e7beb9b5cd2e7b03fa7d01a96d7b56a700eed14958c1829f757633634b915693f92230a71365ce89d47166cd708124aef3baebf16315fea384982e48730b019bd925119382756d8774032eb1d4840c0b5606a7527ab02f54e4481aeb26ad5cb751df4591dbb473b46ed15954f6c2f2a29e840dd0b3ef34ba8e2fd4e9c7cb4f2a917448e069c346fa40abe90e58c30974f1bf47b0f636766b6dd67669c0d0e867a0b2b1bf71293211e27f3cde5f691a02d6dabb37faa77611f1602c727485678d5c952bbe5be1422db5b9b5c1dbf17cdee83e567abfb3eccb899859d789250b3b217d7228649bfc8edc791727fcbf73fd4c28374a8fd3875075b0cbf49efdbc7153f664663e8ce5b344c4cd9e5799d25734b9909cef045c718280ad762d5cf47f926106fac756658e55bc774f0f800f567836966816d7b1d68fd38cd655a90937343a7f7a8d52ad44b1f8abaf9f7de1731cfe085ed69bbee5b1a10101264faa5c8506e91448b38dcdafdf5cf2fe2bff2ac889ad361081fba923a226e45844e684a6b835c7104a3f94432d0f3dea4ac479ef137e0e733edbdf028e63dfac7217c26dc139894ef8722b7b73797dd35ce69e6373dfe518b72531b74f84c759a5da4154caeff8244fe88d2933936193bd800055ed370697398f43489a69aaac5b1fef86ab149a3669a0f9e4f0e68cd50b294327e0b39cf291c4a597e79650ba6548d897b1c45cfd45978ae53319d3577e4026728b20e661ff39426b670418265418d94a895ec5d62fe8dfcbb4ce5888eca3430dfa916d2fa3c5a1b4243d96e57053be685bb21a9b0f564d96cc4ab24fccae137dbd1cd647a81abc8bfd901f4373ced931d6b3c58d419fa952b34a6e7c7ce6ab3b665041e5cb42f343d332989454bff84d0920c0abdf1bc02a9a7fa7658ce3ea4f82b9a8ed0efdb42c61758238ebd6ad9ef0b6f083d0c64fe221303863a88d7dc91523b4397e4d6663965ea01b3004486db905aba98c6b941300948b8a4c4878d5529b93e758fa66bd0e2d5b2cd2d821849edd90c9ee23dfff2198b27da5c001aede6c1ac0bcd50ec05b5ab76dcd62c9f5d9a034c634a3b714c4b5e5b9c4782fb342e9bef4636788fb01b59e68cf0b9ccb9e398cc7a42ceefc2138e009a332f117a1040e89b2eb6268158c577d9417d4b0801305f92c22a22adb5c3a46597dafd69f9631ee225fdc0e52c0e9affc3df209d2234b533d6b5f71499be7a925caf382c273a2d9d9c32239f02977cb70ec791c425117984b59a8bfcb224228a3ab282ed36147985db59b93a770c5507eb42814befd36fb9a53afbcc81105002a5ef39b975f8d8c32c677f0e33266780df50274a2296c77c74bfd35c0995ccc1a5adcc21aff263d95259f3639e4ecc070d0ff311b29bbee16ed3d93cc4c07a5f14cb744f29d40dfa5bd365e5301453495683dd2e857ab0342e8508249d93e04445bd64dc5ceb8fbeb666af6a99c0f8b9415cceaa34b1dfedcf080cc9e73594bf8cf5189f2a4d0c656f7757955dbd53b1982b9ac2c3b4a782aacd0535ea2515296d74fc5741d1597cdc1ba89b13c069f8f3215619afc838775ad451f18361857f022a08d3ac8854a9c7fd6b68551b24bc20f157cd18849c2c2a98ed70848b2547eb3fa63adaf80cb6dfd1dccfd5207c28c520373d0fdfc46feab4c67de69b081fe8221d5218544ef0656efad4ce75488cef380ca4f6cdcdf2bec193b4b51aed36eb93068d4e40f37baca8fd078692db17c02a7d5e2db9b0549654039b5e15a69a45b1071eab416baebdb19af094e74e38c9edba7fbf3112195f59f679e9b64edb203215306ac812950a94be6d0e9f46e188cb98f43717845677f796b8b25165bd41cfb1f76372266f943bd9ee9f9903c141a43f067837ecefa26f6971218497b0b2b319808370bf74d397d3bbe06001ec560dd1975b8e34a4b74d68f4fa6e5db07aee5585b59f0f6ef0ea846d4b6aed7539cee4ec6c79039777b7bf7ef655b657ec316b680e001fcbe2511a4635fc6567c43747a86a3a8acee0017e919279851302c28a31a12dc1ea6dab9af28b819bcbff09c03f87ce8724a55c8293934808a53b276434de246a6925e261964b31d2fcfe7c572b9ec8c4a91637a4af2ba81c15ca4218b473a73e8bad508f7aa7b41c91dcc6fcf7f21bfb11e8b87e1b01e4e9f32803a72f7898f53e81de68299f50372e2b487d37c631448754ddf1c703da60ec8f55ec48e69af0d6af6b5b34077e5972cd34e06492225495436e779daf19f9178db5f469db863147c208559a8675cdee3390e29ffb34a4edf9dbbb704ec1a547aabaea2d83ea4ceb0a66b702b5f3289f0d49998a36948ddf77fcb36ba2e0297a6a516d0f3a78de730ecf4c1c3b49074f8386f32f1cb583ca98e887046c4b26d3dbc18e8979c4b667ea889d9152fc72793459dc39f9d9a51cbebf9d1e5311009df608dc6dc8dc774f2111c5d7afb705289693f57db87b5095021352e6227178bd3ba5b63223aa7ea37bf20679cfa7d0e236028027933717294074ce7516b0d305b4fa19154b410b607fe38d4c914971d92c35a89dfd468ab40014921e448d8622c231d5cc78baacf12f52e4775adef220160cb41a0197ee872bb306ba4aad189e24d4538ba5fed01247dd5f0c85fe52c3054735b39beda090a1b8823e51d451ee2048c04c680ec9ae82b849ca0f95a32e1242af21450740c4e3a11f6a531ab16a6ebf40fdfc5d04211a51eb5205a5a16a1faa58e647266781e378416da1d3f9b9029c0776a0db2a57626ba368656e377de0ad58ea17ae696eb5537d9700afaded688ade91d909489606432ce8884186396bdbf449e6cc73ef06e190bb2d650ff15902fb037dd84632e71c5988e287d93df5834d216cad795fa5f98399f355bbd3a5c1332154552284d4db6659f6b17bd30f753aa1e4d366b1bd0276219499eeac00906986c268afb09661ab", 0x1000, 0xfffffffffffffffc) keyctl$describe(0x6, r5, &(0x7f0000000100)=""/158, 0x9e) sendmmsg$alg(r4, 0x0, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000)="7168677d97c7e7", 0x3, 0x9, 0x8001, 0x6, 0x2, 0x7, 0x6, 'syz1\x00'}) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000880)=0xe8) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet6_mreq(r11, 0x29, 0x0, &(0x7f0000005580)={@mcast2, 0x0}, &(0x7f00000055c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000005f80)={0x11, 0x0, 0x0}, &(0x7f0000005fc0)=0x14) sendmmsg$inet(r5, &(0x7f00000061c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000200)="83d10bd9ccbfd3cee198c4f9dbcf56d751ef545354635efb022afe3da550be7727b3f55ee456e5a6eb8e74181a6a56daa8fea62331cbbc2cb03fb8b0015d5bab0161ad5608fd96a8f913618fc285f978f7af87bb2c0187bd16b17d63affd58d6dd1c0ba77916bfadf07db447d2264b2f922e3fcb6b983f944c67455353be736b5bb070c0ffb0", 0x86}, {&(0x7f00000002c0)="5191b3b4dee241f6371c901e8323142b185791b16850ea8036dca044", 0x1c}], 0x3, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000500)="e33313fe0ee67ceca7f26a07c604176bd3bfbe5ef136825623596e214f2bc8f47c085068e6af17df2afb03f86e9f9eb1a0b88833cb00ef68456236e1cca3556e37dee8cffff6eecfe749db945dc4b439e6228bf8e4ff3d7a55a9067a7e142954f893f059777cf82ea0527e9799e237e444696a1ed9f6ec321ee4fa69fb4302cbc0ac24dcefde2d69a54fcea07a0a98146742850c45692eb7c7dc24aaf3905d", 0x9f}, {&(0x7f00000005c0)="8bcee1eaaa2c48a1a76cf342852fe64e999d07cc7bd884", 0x17}, {&(0x7f0000000600)="b38d66c62355228d7e652481135741b789031a5ce4a846863fad569f27c6a2c0942056ddca99d164cf2a1bfb39dfde62f9145fa2eb3dd77b2c6cff6436c7dbe1e5726639ba637f26368ab6f3", 0x4c}, {&(0x7f0000000680)="e438cd94971807a24502ccd039678b9759fb82629565537ec9f6dcab0ced7e951667e77b302bf345084c9353bd4bbf7b565a592efd2daa93c114e4070c01586823d136350e3c8471d9fa89ceec2457d2a10ec2de0af185ed21831c568c7b62b5e962438e6e05a2688f58920ceadd2f799f922713cf390928a1b8fb22fcb65cb17dbf05388ee77700871869fda8cedf89e005a214abc8e00f1e801be896a7cde866eb328bee4fa3a15f4c4749358874f50d884c77", 0xb4}], 0x4, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}}, {{&(0x7f0000001a40)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000004040)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="5b48c9", 0x3}, {&(0x7f0000002ac0)="69fbff2ef10227db5286b8f245efe202dd9d86583417d28e39842e99c2bc49c5e51677be4f4b44136917c3d17dc3a2598bc0b8a9261eee158d710071808545b29e9f2d4aea102f61dba10299cd873d7f82579baef9381b9d22ceb3cc6b24f0969e5401f5f2522b2fbee7f43bca81917e2ac68bf86eeaabdba8f99263a565a3ca4cfbad80b1f905fe11335ba9337fc4b1cfcd153b2caa1e2f273ae7f68d9e3a8296e8be79f119cc52fe89eb40f03c9a2d5cf339ed6f6762a25334fbf5cfb37c3c8028c4cae2faaaed5f169f7c29a444164934a4f051b52925d1cfc9cae68f86f0843609f6ac", 0xe5}, {&(0x7f0000002bc0)="d8855d10981d14455cb4f50810a38f8684cbe08513d5db8daca02b1efd41698d048db02965d09301307f014e2362b06e7c655681cb18e9ca377f7ec820165471a8f73de917f89a5f01dbf1f2c20bb01beb342f51747a5e35cdf6b0613c99a3f6a995b3b1b54c8c4687b1ef3aebee15e5ecc4c6b73880caf41ed339f77488edf36a0db6371ad8da0b41fa8c3725de9af1c455a000616535733aac99c87415de02433a160d970fdfe8e7c58fdbbe6ad13f588eff1a9c590f7bce1c817e52f18ba2adcf65318ac68cddb9051b81a9af0397660ec905ea9095a90f7308a11038ca7b7e7c6dd2", 0xfffffffffffffde9}, {&(0x7f0000002cc0)="3b17e20b4420309eb3c00f3c787436aeaef626b2a7589cd3d6ac8608bfd8c5fd643cae8bac038f90443728bc13464d40863522cf17cb10e3bbf4cf98542ba5dad069d21ebc8611fe27638e7da7cd28d49808d676ecc2447b9e00961cab8e4f50eb204f901251190d4228a2ebd29197e0da10ea601e9aa1724ea4b9fb343cc2", 0x7f}, {&(0x7f0000002d40)="b418e433a1b852f905de7d4ebb31f64287e0e03c13ca676ba5b70ba71a82a892a52b6e0e4717267899a778f3649dc021b8b9db826af1040987271dc303bfc034f255bfe6632a6b7444ab9693ddc27d88141079eceecbade15a28cda1d9d991d369ca7ab76d8ead70609bd0557b5d2b31bbfb0dd3d4dfc17e5b4a94877b0ebf6f9a6c768c", 0x84}, {&(0x7f0000002e00)="7410e0123732e5cc37c562bd3e262eafe71cb86ff838e77d7c0c62df5176ccfb11947c955e1247934cfa287dc5cfe18ecd2368ac4fe07a9d7a6e0f3e7e2db336eff0c46808a8e15bf92e9d01b731ff5d3e030ba74b123f1dcdacc6c8a2eb6a4c6dca61033b1540d5212a463defcffde6c885b3", 0x73}, {&(0x7f0000002e80)="dd3d8e06f270c22928f71a853f0f091850da02afd215269c2fbcdfa92f434ee2bd627543d50343ec8146ccc226832390e5ba28116d4c8463b8bf1db583be718ec39f9b12ab7be73386dd3838d99c9721398db7e45391598a59d40127f661e21f23492f774efb6801d3b872a711604d6bcef7650d613e03a461f9bb2797b6a930869e26bef220ec6ec6a3171e5babfabcef486b0962e18c6abe56ad8b1e7721171bcc91c6a0", 0xa5}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="631418712b509c4347a6226e873500aa3fd58b1eaf697b3ef47733217c6e4d0158cab0fe64d753cfe37f8abb2daab6fb27f15333d4c6c775c63d21b38e27ee31d94eecf1bb73a5a26ba95f7132e66ae19eb426a962853a5c2b75422483ea42b478c8d31afd7359f000e3a79dedafa541dbbc9efee93e784d31ad20920ed608c95197ac1e1b12d8fe39f97813810661e527f752b54fdeaee4a672c3eb9d097483b551c52fe38e495327441498e75d2009f3eaec9f36cfa7fd04600f51dc4c5ae63104c6b4a07de927f4525e5071ae89d7fa2a807c1962556964f00bd5452a1903edaa1819a0e29a51c6de23a5", 0xec}], 0xa}}, {{&(0x7f0000004100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004200)=[{&(0x7f0000004140)="8ca6b6b81ba3f765232d3df932dea0facbb50b1aa80789ba94ebc1b60632af635fab6c8e52cc856cfe67561d73d83b1ce9221ff3574c2dd65ad98732ba8d56e82456e9ea2c19a3c9d206eb6671a31f3d3edf55b1472692d5fd7a98633e8f19268ec4eb32708af314f1c461c1736006fea91e7e22d16496362c81b444397c4c616897892543e1da42ab09c79cc9ba286d511e", 0x92}], 0x1}}, {{&(0x7f0000004240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000005500)=[{&(0x7f0000004280)="5fd75af56f4950accf1b015efca86bb429cd8e37", 0x14}, {&(0x7f00000042c0)="15af979ecd1e750a7ad991fe29b741f6e5cc55ec6bb01799e6f336829497690dff3f00383a18ccc1666713f865db5da623576b25b0ad8192ce7bdbe5ad8015fb78e99be3f6f710d9415799f51f7c792da9ecfc186a316e9c0137b45d82212b98aff2ac1d03991411741c36e125b28ec80f86bfe0f509ac19da80782c9515d2acd8613082459b2d4a480cf4e47de36dba00ba1afc3bb250d54dbeddfb22ecad1b445d2797ef42155b3e03004e17dcabe5b287adc4c59572461612c35b3f9fb6eb94287a186c807b9b15949b04d48328b807088e124e844d34340d1772d03d6306", 0xe0}, {&(0x7f00000043c0)="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", 0x1000}, {&(0x7f00000053c0)="b4c63890306b0fafb6ae738bcff8246d00f203137110b0e90501705911dbbfd5", 0x20}, {&(0x7f0000005400)="b7b868646dc9c2a2bdb84802a0c29e79867f3c0b2856b2fa13a7c738282dd088bb16b7adacdd3e0d3daa246e169b87cab7695ab31e6b4fbd7860e59a7640b0677c6527f092e2c5517d845a84d4a6612562274771647d40c2c6ef921bfc44991aab5c32854c01b7340e256b7a25d97d54a21dc7e43ab14e97f8b9bd730619a00f7495a1c8522d17d041f19b3b40d346c1527810f2b8a5c8001b4ebaf765bca36b6297fbf2b192bbf15d0dd4010edb601ba973ba9d89eaef63aa86ea6d2e69b9adc1455c734e", 0xc5}], 0x5, &(0x7f0000006380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x4, 0xa, "a55f80ecc10d8f53"}, @cipso={0x86, 0x10, 0x80000001, [{0x7, 0x5, "3d09ec"}, {0x7, 0x5, "4a86e2"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xf, 0x7f, [@multicast1, @empty, @loopback]}, @noop, @noop, @cipso={0x86, 0x65, 0x2027, [{0x8, 0x3, "f8"}, {0x0, 0xb, "0d7cbd44c926f30d89"}, {0x6, 0x7, "11397b5ed7"}, {0x7, 0x12, "9d1e9bf082039f69d65eb5a8cd3a14f0"}, {0x1, 0x11, "829f8e5bf6037193af1a0c4843b470"}, {0x0, 0xa, "a6ee3f786d02017a"}, {0x5, 0x8, "633513da21d6"}, {0xc, 0x12, "8b015686c04903715516cd58dc94f10e"}, {0x6, 0x3, "bc"}]}, @rr={0x7, 0x2b, 0x0, [@broadcast, @multicast2, @local, @rand_addr=0x7fff, @empty, @multicast1, @rand_addr=0x1ff, @broadcast, @loopback, @multicast2]}, @lsrr={0x83, 0x7, 0xb9, [@rand_addr=0x200]}, @ssrr={0x89, 0xb, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x0, 0xf, "4ac4729a8596dce7670be3acb5"}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfbd}}], 0x188}}, {{&(0x7f0000005780)={0x2, 0x4e20, @rand_addr=0x9}, 0x10, &(0x7f0000005a00)=[{&(0x7f00000057c0)="1cb6826610d5048481689eaa948341129ff4c082a83b93285d8cc5d4a9281a4641d14954ddaa2fca617abdfb312090750ee342f88f4893cc8bf6d25a2ed7be2939d6f1", 0x43}, {&(0x7f0000005840)="fd0bb5263bbc031b84eeda1e9ce1927779be9e3766f5c625a399c06c960757edddd502809eae03bbcbf09cf96f200c76a2b1f0c9bbf1a4c4fd63d4ef52f334cf2fcf8d7ec5e8b124d48565ebcc7107c1e5455cd77334472c004e40a7d16085bde3c0241eb662123040782787fac116d377a32e02d13426bfe63feac4bf10977612b7e272f290461c1ed2cb6edc89ce9fc873390cea1278f2d2c05658a12d93bfcf47b73ce48378e4e32a14aa26107e03", 0xb0}, {&(0x7f0000005900)="74d79a7ce1837a32b637ffdadc5d58a749a4e8e8a58c0872287ebb9332d72c42593e6e61c89126d7f436220ffee2c7f51ef94700de9ca8b18bd7d799dba89f44af7ad9e7ddcfe1b2c24c3e4eeb5f826d16baf8dc66ac22880dd5269bd079fcbdec929eca80d8c8b70011a96aa449b384e1c98807ffa101713e45fb6896e2cc72201b8f31075b35c6fbaf17ed478b930471831a485b068002634b49f6a562dee99ac7089c2221e2b2f629c5a0aeaf25becada74ae42155f9a8e4019c3bad0bee2fa39f012773e2c559ba8ccfdcc9ba7", 0xcf}], 0x3, &(0x7f0000005a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x729}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x60}}, {{&(0x7f0000005ac0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000005ec0)=[{&(0x7f0000005b00)}, {&(0x7f0000005b40)="8c5e9d4ef6fe1f8ada850d916205d0c67ad767b4db18b7d1372b", 0x1a}, {&(0x7f0000005b80)="1203442bb9d9c1af79d8cbf7e9fe81e965bbc5d588405316719b67d1a8a6dbca2e0001a6fd74ff732383b9d2d2da9cb61f1b84a965483e7cd41cba75c07977f2697a17ddf63da9c9d90a74e6fca055fb655c9626220b9277bc7782bae4", 0x5d}, {&(0x7f0000005c00)="4049b572b12145e3d3ba9323a5976044472f1c4cafc17c691909f33e5f80141689d6ccb1f207853f56f406c9faf4b117052456cb232010fc014ed7bc3c1a6c4e5d25bfa09952dbd6cc30959807a18fd33e80a93dacde67db26c4bbb443a07d8b7143a59d77b6e7242225dc848f95edc4da7f3c792d32245e9d904b6d90e2d41c532e2ac95cf51071dc7f2c4ec71f48b95cf8c62cbd9e15767ef8e0a0aefdb0c064d605ed39bd", 0xa6}, {&(0x7f0000005cc0)="d8c768ad3e499acf05938b47d7ac8c1e56619996b171bbf550ce3ec75b00aa6f12c9fb9077ee920713847a8ae19e141e4a9438d662ab6b2af6b6008be9c371330b1c95521dd11e3b0d62008282451cf157c50718d3cc9754a3caf8efb332696cf39a92b9c7c4c2c43991b6514dcaf76eaa922cfe4d36a4f3c10904297ea32f2c66474229bf03822c44cfa9189f2a0d4c2b1aa19974f16f0497c2204bfce8c8fc", 0xa0}, {&(0x7f0000005d80)="6085cdf12f27adc7a03b534c14112bfd2ee96d02f3590fda4407142dd6d5dca8fcce3382fdf45eedf97d36e9876e6fd32af274d65ea188d99b4f15d754c755eb1c", 0x41}, {&(0x7f0000005e00)="e62da3d90b7254abff1d99ef0898dd2ab496e9d8a3fccb6b1126c4de6c4aa539745e8abe7189f07a87f0982e87e59a04ef970ef12a408a6f6584255e28562d2db1777fc300f890af75381c048226b530f621a0e217d9d79d33a825194568c4b03bf1708d673fc5db29044248270a7be42180381cd94332bff4bd4eaf059abd32531a79523842c9a405d3c442389492f3c2c6", 0x92}], 0x7, &(0x7f0000006540)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="ac1414aaac1414bb000000004000000000000000000000000700000044100088ac1414b70000004000000008071701ac1414bb00000401ffffffffac141427ac1414189406ef6c851100000014000000000000000000000001000000000000000000000000010000000700000000000000d2afa01503ea00c169da61803a3d221b5485690fa99d02dc765dfcda5db8b83be2857950ca9afaf571e18663b915e861b34eba12c04200a91ba16df7dfacbb7ef0738e2f5f2277443fbe283be1148ad3c31a69d6ff0dd5f15f558cfa2d13cfb4510adaae78a5d774fa6c00"/233], 0x1f5}}], 0x7, 0x20) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="6b107b6fe6db6b2e0131167d65711aca6ddb5f021ef9acb84976cb51a1212bc3497348f016d566a04b6152698c34c02cc988bd2433146629065b042f1d2c84483cdcc46ce64374", 0x1}, 0xfffffffffffffeb5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:50 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000020105"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1356.518341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.519052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.524178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.530481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.598302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.599428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.604162][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:50 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x20000) sendmsg$alg(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000001c0)="60701bd8bcd5fdeb89121868b5e13690037f30723c8c8bde1354b8b4fde4ff157a0d83a03ec541215c8822d19d4d09d5141a3b6fe17232798abccc2fb55ffb1f5c076fde16dfa5e91dd7b473c7e8a427", 0x50}, {&(0x7f0000000240)="07aadd01940e314fde9c7efb70e724e8cc79adfff4d6ef1316aa4fe74ae4b3edf5cfede68f98be7bb3", 0x29}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="c173667dfa71e1716df1", 0xa}, {&(0x7f00000003c0)="fbaab1bc487bfbd24e2ff3c95c1e1902da33b16df18b92c94c4729da32d37b4faafb05e4b2d5fbbc2dac3014b920062539ededa4c9c88fd0b09c447ce9c707d015190a9a27faae2d8f235bda84be0462dcf7f23ef707f768019e", 0x5a}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="68ead3116b54d5364d3b07534ad5721eb13e4ce3f79af523035a99fba89baeec8434a465ec065b29521ec72aed5fcd9e5f54738d1af6750bb4f673df116b0b8580d9c369edfa257d2f675314ef5ee345d505e5ea34a38d9ed6f1f0f9a4c8bccd9ae97d6af0a3222370edec9df9e5aeeaa3b0b0dcb5937593e89d0a30521df5194227fc584a55b1bc9172ecb3dbeb56c1d2de6467b79d4ea3f04ab796d2b1ca2478406a52dab4ad5802f83f45e5a953e13b3c774f3d7a0a4d6a4c0034889d9ea8547ae985f7f5d4f530ca1d6a3734e14d4341ab586bc9f9e3a849263584b9d54a84c0bab9709dd7f3277690a15abc6d2f05bcbc9a2395dc658b40ab1a776443f091b2ad8862e958da13520d991c64d41063e6c62d73ab842dd01400c02abb3c9cfae92af080c641f4097d8ebc94bccfc567ce9a8d0617663be44aa230f3a3cf9218ee506db31427c5bb1e97d034cf0ff0a86c0d0a6771c34b3d8b77ce8089fc6972c0289838381245a1a3ef8721f41af2f057514330a9db8d28e735fb6d0ef2dfd9a84a77a4a246c86dd5ec42c0795a30dd2bc9e02daa149bd11c27623fe45ee30a1f336279f69b02800350b868d3be99eb8892b26ba48615b9bdced11ea681e5353579369b29d5f4741ce9c8be3a4715db1a8fb5742e64c8763ff19b5bcc87db8cb3b41369c12fffe5a469fef4ffec952fe8ffb5bfbdc882287bd420d5ef8e7bb9f61ad751b1ab3f0ed5a243587a7488f6f614a5ac415f869d6a80a011b34d44a76346f2b682281ab1d5acdacee6f1716f01371690d5d0d5a98dab574338f6c44a3ff384a1aa14b0310b6e5da44567a20855f0144932a200c54c8932786f8d77db7b7d795f3da7118645dfc2a3f2a8aea7bfa31f332d5c159f3b9f9722d0e09f2695bd3d4a8bd32dacef12235b3bac52344d35656d19adfbbee0b4feadccfedb09a094b7da52274303253116c1232933e8f0096806079472f370fcf48124a0588269f382568ec7f602a65ac7b6cd902595e6122eca11bdbd917f4c3ce5b3538a3dd873d90b26ebf53a63f3cc86b28e59b9f01b6bb1b764204a9d3a3bb0bf2365d69a3bda6a6c15ca7a68c0baca28d1c9b7304557515bfe168c0f0a2ae0f723c803df7b0b9a80378f51bad5b8d5f301908552bbb2bbb066d163d70a3194a33176312abba7b467c8f84b392e0513b168fb8007d916197e0f9ff0dc26e5c1e836f854b5dd53fda10cb553d3e5a6974d80f05ea1a9f125e36a78268706097de08fa297d1b024e5742165932df73354f295486ec022c355b1c6b8774e1f05c62bcec54184bae87994de691a56b0e9cdbcbca74817abfc289e9e65cf7af4b1a0be8c9cf3118941a1184c3616e3f81ee89b1691b0d3ac232c311cefdd38a2c8d5a9ac69cde05db6d111d92a937ec10db640e430b606b8a0841fc1bd1262c632b1e4959978ed5395614cbae4239a55a20e6f580fee684ca77ef082cf88493adf604b0e07ff3067e1812650723376d7c864280dffe39295ef3aff48aecf425630855cce8d4439662574ebb04b75ccd6ff318039605f31df7a647ce9f173205a04f5a12c21f29bde2ac7c5be1e7593207e6036712cee685a89955d28a920d473f759e4912754a49360744dfe1b4ed362d4f06f52fea4cee840fab64acbf33e843b6c4ab6e0876244c36e6961f8c3e6abc34a2ecdd61a3199031b1c95a4b5a38829595a349823c6900a39d0b024aaae3c98a4486c335b9730bc6ffd2eeb71b57a1aeec93b3c266e11f7afff5fc8def05cfd0482fbe0b60245cacf7e0c970a487c6fd9b51ceed04bbd93f3ac63c5e243798756db187e898255599df5bfae55208fd6c6afc8db78e1eba33545e78575e210f1acf070a3ed115f31f23ee4e1f27fb3bd7cb8b34ad7566ca01625f48311c30fdce313b6877d60a517ddd80bfae8af0887bf54e50ffb9a0b4ae77a47645a34da242cc76be35238f23086c6dc4b2e7fbd017683ff740c6a74f509ccec7a64f58c48eb5a75177a0f574f10da1e61f35904f67821e583285f769da8c3ae9605214498ecd44637e761795e427d0952d5eacc6dac8127218cf78496a527d2e8779b4a1f76d94b9239cdb8b6eda348d7acb0b8ba7934eb04050cbb16319163c11969e9ce0d8411a9fd483266a876b8d616fef52228d2473c6571ebbf5faee826edbb314a2b965c64057c47e63191113340d7f51945e2770b8f12c4f672e92cd5914d3f7872dd4178af250518d45135c5be18aae59a595a3e844ac83042cb697760b38d69fe60e8695190f6f0c0d8e207e5d7f6c0c178ac2f75d1f5076497bd2e953e5216f61864d47847418a3b694ad0ad94133a703ace6b14b9197457d6390fc10548222a8382e206a15aaef5527bbcbcbb2611a5bae8ba51e134cb3ac026932dc9583576b18244b508dadb1a91b522b65f253a3a19f639d2c68c4124019c7ee5f5692ca31dad1689e78019f3cdd1f3bceb93a40407019f37cd2d2c03ebbf96aa0e85a82acb338fd3ee4cb5cc7b5c56009ea55519c464990b420ca0d0096e7cbcc2c24051f6a9616efe7406dcf4529eca75e48aa5602f802b968680b6e2b6bce27d6f9961b216d3a3bfcf33f4a0d59d8a0b682e41ad1967e7c11cb418331a14b51a16ae67963a1141ca1598af4e6373bfdd22661e1a4eb9b40f24ea9c249dc54a5f5f4c9bd9f635b1ca2a92fd2345134f251518c6bef4dcb563ea77d022efc0b2be86c02be0debc7d73ea0bb23bb82b8f74c3c4daddcd5a38734170d3e9d68d7fcc9809245b42661af6f912a445bb0e433650188a5cc07ddec152c25662f60f5690845201a6fc4871c5f61207004ccafea3f7dfafa291b980fedd8ae6e04836e948337eff7a1f7baf8f1d3e06224db2efaf04fdca0f4e5cee4a8cf4787a1162774537912a60fb4cfa85a04f1ed95c4366882f6ec178173559f295192eaeddca3a14955a63f0f2684de34d7423ffb9626d9a37e8ce4cb61cdf5fd600c55762ef0674da76b2535617b01928c52ad00a3112aa3c3e81afd2a0822c8975469775502ef1274efd7b7e5435fbf5557cae58dd9d3f78a42e13e5864875c19c7c29f9d7608f9e87f60737a402ba7cbfc905e7add85da3201a851f630745a42cd71cb319de1cddc124c2471eea2f640248b6f0bc65758d5982d18ab73710fe5da96274514d954c4731ee3038c5204b8e2ca132a4a46acbf48dd01110018a394ee940100dd046c621623184985adaacd2dc619c05f10f5ad938e734705de45a57ff2cb67b7c48e57bae4d540364c925a6862d9dc7c19d7f71ab2099ce1286c6c550ba584139cfb4d38c6e8ea11dd90c89e700a199b5cdb99a6264902a367a0f505fe3966371f24362b301db8a0a2b14a27b22ad638dabc9f43a17ec6259bdb9f8cf984cc7f3d5ea8d342a11419ff632666999363fc6137bcdae2cfbaaebbb7cac37336a3a5a0cd9d95645e6894517a9b53d51c684e3c9bde0340f6f1e651f6e95f2e31a9cc7ee0c0bb65596602d1cdd537b3a8f73f60183fcdb737cfc2d0e190127e57c3b1bc4c1293379073c8162a3fb81ef75c47762ae130525cbe69cb0971bb01b61e4622a2bf6d56c8c8e84eb95ec89a26b9f82930ba0fe308bbd0b9c4a80bcb3ee1cd189197f347b4e4e6756f6ff9dbb3bf9b1cd616fd86fcb33c5b78b7c087d3df35846f08118a7680a940899cdc59c8457e430ae64761d280f9ffa63f2692f368ae2e94cb81481e03fb953b91673ad95861275f00e71025dcad496208d1d8c8425a8c53df4543664e7e8fa0dd7d12bdcb34f2343ab064c606a3434106114466370545c6ddfbda195498d382fa0abf096d7d592f5a7260c61c5e81b176e0ca041ccf8bd3f6f338b2620378de49965fd142d47042d8ebb89f6188cb79124ebf18abe641e5080785ac8b1f7236495af7fc3197b9368f03c19ff50b143ff1f247bc6d65315eaa41a3cc9cda0186f602197c83a42064a467cf4cf93d328186c083dbb4abb60542f63464f76ec6f9f9236ad6f53925ee39c50bf32855e65b49f62120c898ffe14925e09a790531045b81d3a21e15e233a7e5229b86a94ce56820ed5aa559daa511195fab683e94bcc40540635289a3dc285a048f23e2314abb843292812cef7f19f5bc606c294f93da6bbba5446c22837e814ed05766daebf5d922a6c158204f6cf1a94ed7e4340bdf861b6e0183e0ef6d0444ecbccc49c898f83425407ca18f4a9a901966cf1fdbe9391b903cf77c2b17a8720ee80ddf186b332b2c40802319162b8ccca950fbf1dfbbd213050d1e0ebfead7404b46c74d09cc81ab91e26546dbf3622a245675bf83c71ebffa9a010f51eb4895b2fec0fae62433c3490294e11019b1254fcb0b17b94a798b0b14b3e5c2fa3df427d850571c678b3e88a185487171558fbb4e80160358fd8d783ec3d1119b829ef4440eb2cf6d37e1f830b891a0feadfb73d562abbe0257a752ce8a94b504121b8c12034cc88f3432206b1b4bcf600ee9759941a1349737f23d9df3067c90e26f9cb7a20754623f8aeac8cb3aa4f907df8997f077c85fa1781514531696ced42a48d78a73327289741c3018ac70a52258e841f7db3fc3c19c8667dba2666ab06cc6b02118adb1f15deac94b4b606b0eb07d67aebc858de0e65142b46dd98ae1936ffca1f203242209285ad3fbfa9a042bd91ec9c147b8d5ff28eb11bfc93cc97e88b617fca04ddb2b7f767e08029aadba992bdd1a9145f58697b9456ddcd8b912ae1b342d56785315715d09cbfd58a6c913aa0e99b20453ccc631d8044c33015a8adf7e72185b056ae2a99d6e12b5682f7905db04b4e8d9cb9628956cf9604ba738b656f97c41ee0c4308c3cd9af969098a431bfc703366297b56594500db63274f5be48ba755c8008b2d8f3c2c5d2b6b74ddcc0d8938145da0cd0c631fc7848e88c68d68a8a5ba46c1ffc9742fe67a3c68dd945e8872d5dbfdc00c30f67534463b198cb36f626652b975e6e59822db2c9606440b84696735ba1d5cb9dcbf3b562758439485a824b23e8192116f82d9c977a3f881881e82339d093a30f04f76b0e812e762b97bee166bca7a6c4a5946203da881f125bbee0812fb9195a0849995b87834384dbc623606cad26b9959956273aa1d13d9288b68229f5bb9a6c498e20fdae7086643bff5af2b88a407be6d35a1009ef249370b0ff4f3b8ef596b5b2b1e4a00b128f8ac22ce2b19b586ba858b7233ce1033e5cce92106fe96c7c8fd80d1daaa28640b61eedaf09ecab6665b2e65cf71f7e494d3304f5f0e90d7aefc2faf83808b6ac12a0c8e696ead61cdc2f853eb723b7af04d0d054c848e883201f65e6c2a5cedbcb50637191bcba0f56ea9df7ccac15aa764a3f0bc7c53868a8277e4380da86dc3f441fe7547f1b2d48eb4fe17c01be4272039d6919828e033bd129102173af40192ae63a5a5bae612985ef2effe27368b18647e377ce0c70ac61cd06ec13fb32709c8d16e4701f0af4516fd5724c9b63e92c378cb28bbe68afcf55f159c10380b31a3c2f69b5643aaf06200d99c2ec13c32d8e0b0eb51e0c12cf5ebb90d3f3014527a8672fbcb7a0715f446eb5491f72e7f33dc0398e69e3fcd33a6b6611488970b4e362ac2ebef6e92013ae0746c3cc7c83820a304eb0dc7b0e5fdd4419a42f9ffc5e9dcbd21464fce75258a884564448cb03523c6681dad64fbaebad4ee8d590c8005d91a1f77e14b8c497a589a8043e6206c806e2ca7142cbe05c408621712a7ffd17ff898b0b1f5f745a03596d07211a51f0ae857c93763178b8", 0x1000}], 0x7, &(0x7f00000024c0)=[@op={0x18}], 0x18, 0x8001}, 0xc080084) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000002540)={0x1, 0x100000, 0x1000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x1000000000000000, 0x5000, 0x400, 0xc, 0xf}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 1356.775543][T26366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x400, 0x0, 0xff, 0x1, 0xfff}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfff7fffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpid() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:51 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) sendfile(r1, r0, 0x0, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x48001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1357.238295][ C0] protocol 88fb is buggy, dev hsr_slave_0 15:18:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000180)=""/98) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:51 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000020105"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:18:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:51 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x5a0de4bb42ba9fe1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1357.768474][T26420] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1357.794803][T26420] CPU: 1 PID: 26420 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1357.803533][T26420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.813699][T26420] Call Trace: [ 1357.817007][T26420] dump_stack+0x197/0x210 [ 1357.819096][T26421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1357.821366][T26420] dump_header+0x10b/0x82d [ 1357.821378][T26420] ? oom_kill_process+0x94/0x420 [ 1357.821396][T26420] oom_kill_process.cold+0x10/0x15 [ 1357.845156][T26420] out_of_memory+0x334/0x13c0 [ 1357.845169][T26420] ? find_held_lock+0x35/0x130 [ 1357.845190][T26420] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1357.854607][T26420] ? oom_killer_disable+0x280/0x280 [ 1357.854632][T26420] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1357.854653][T26420] ? memcg_oom_wake_function+0x700/0x700 [ 1357.876812][T26420] ? do_raw_spin_unlock+0x178/0x270 [ 1357.882017][T26420] ? _raw_spin_unlock+0x28/0x40 [ 1357.882038][T26420] try_charge+0xf76/0x14d0 [ 1357.882055][T26420] ? find_held_lock+0x35/0x130 [ 1357.896132][T26420] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1357.901695][T26420] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1357.907256][T26420] ? find_held_lock+0x35/0x130 [ 1357.912032][T26420] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1357.917602][T26420] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1357.923184][T26420] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1357.928572][T26420] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1357.934137][T26420] __memcg_kmem_charge+0x13a/0x3a0 [ 1357.939261][T26420] copy_process+0x79d/0x7230 [ 1357.943927][T26420] ? ___perf_sw_event+0x38e/0x570 [ 1357.948949][T26420] ? find_held_lock+0x35/0x130 [ 1357.948975][T26420] ? __cleanup_sighand+0xc0/0xc0 [ 1357.948992][T26420] ? migration_entry_to_page+0x330/0x330 [ 1357.949005][T26420] ? lru_cache_add+0x236/0x5b0 [ 1357.949028][T26420] ? __do_page_fault+0x56a/0xd80 [ 1357.974001][T26420] _do_fork+0x146/0x1090 [ 1357.978270][T26420] ? copy_init_mm+0x20/0x20 [ 1357.982777][T26420] ? lock_downgrade+0x920/0x920 [ 1357.987642][T26420] ? __kasan_check_write+0x14/0x20 [ 1357.992760][T26420] __x64_sys_clone+0x19a/0x260 [ 1357.997523][T26420] ? debug_smp_processor_id+0x33/0x18a [ 1358.002992][T26420] ? __ia32_sys_vfork+0xd0/0xd0 [ 1358.007870][T26420] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1358.014129][T26420] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1358.019443][T26420] ? trace_hardirqs_on+0x67/0x240 [ 1358.025446][T26420] do_syscall_64+0xfa/0x790 [ 1358.029973][T26420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1358.036160][T26420] RIP: 0033:0x45d2d9 [ 1358.040067][T26420] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1358.059685][T26420] RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 15:18:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x0, 0x3, 0x8) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) getpeername$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100860000", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c4c", @ANYRES32=r5, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) setfsuid(r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1358.068114][T26420] RAX: ffffffffffffffda RBX: 00007f4c4048d700 RCX: 000000000045d2d9 [ 1358.076096][T26420] RDX: 00007f4c4048d9d0 RSI: 00007f4c4048cdb0 RDI: 00000000003d0f00 [ 1358.084093][T26420] RBP: 0000000000a6fce0 R08: 00007f4c4048d700 R09: 00007f4c4048d700 [ 1358.092071][T26420] R10: 00007f4c4048d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1358.100053][T26420] R13: 0000000000a6fb7f R14: 00007f4c4048d9c0 R15: 000000000075bf2c [ 1358.111053][T26420] memory: usage 307200kB, limit 307200kB, failcnt 4808 15:18:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1358.118054][T26420] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1358.125344][T26420] Memory cgroup stats for /syz5: [ 1358.125459][T26420] anon 275243008 [ 1358.125459][T26420] file 151552 [ 1358.125459][T26420] kernel_stack 5824512 [ 1358.125459][T26420] slab 10194944 [ 1358.125459][T26420] sock 0 [ 1358.125459][T26420] shmem 65536 [ 1358.125459][T26420] file_mapped 0 [ 1358.125459][T26420] file_dirty 0 [ 1358.125459][T26420] file_writeback 135168 [ 1358.125459][T26420] anon_thp 255852544 [ 1358.125459][T26420] inactive_anon 135168 [ 1358.125459][T26420] active_anon 275243008 [ 1358.125459][T26420] inactive_file 122880 [ 1358.125459][T26420] active_file 45056 [ 1358.125459][T26420] unevictable 0 [ 1358.125459][T26420] slab_reclaimable 1081344 [ 1358.125459][T26420] slab_unreclaimable 9113600 [ 1358.125459][T26420] pgfault 172095 [ 1358.125459][T26420] pgmajfault 0 [ 1358.125459][T26420] workingset_refault 198 [ 1358.125459][T26420] workingset_activate 33 [ 1358.125459][T26420] workingset_nodereclaim 0 [ 1358.125459][T26420] pgrefill 2180 [ 1358.125459][T26420] pgscan 2164 [ 1358.125459][T26420] pgsteal 282 [ 1358.250867][T26420] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20716,uid=0 [ 1358.266791][T26420] Memory cgroup out of memory: Killed process 20716 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:18:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x8, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e80)=0x37d) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) r6 = gettid() waitid(0x83b895581628fca4, r6, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYRESDEC=r6]], 0xfffffffffffffe56}}, 0x20004850) r7 = socket(0xa, 0x3, 0x8) r8 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = gettid() waitid(0x83b895581628fca4, r10, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESDEC=r10]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000d80)=[{0x0, 0x0, [0x4, 0x3f, 0x6, 0x0, 0x0, 0x2, 0x5, 0x3, 0x2, 0x3, 0x9, 0x9, 0x63be, 0x6, 0x0, 0x4]}, {0x3e, 0x0, [0x7, 0x7fffffff, 0x10000, 0x1f, 0x2, 0x5, 0x7, 0x7, 0x4, 0x0, 0x3, 0x7, 0x7fffffff, 0x100, 0xc42, 0x8]}, {0x10, 0x0, [0x80, 0xd1, 0x8, 0x9, 0x101, 0x9, 0x6, 0x4, 0x7, 0x5, 0x1f, 0x6, 0x7, 0xb1d, 0x9, 0x40]}], r9, 0x1, 0x1, 0xd8}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x8d0}}, 0x0) connect$packet(r1, &(0x7f0000000180)={0x11, 0x10, r3, 0x1, 0x4f, 0x6, @random="085b27164b3f"}, 0x14) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r12 = msgget$private(0x0, 0x20) msgsnd(r12, &(0x7f00000001c0)={0x0, "bc9c3deb4e8bbf3199e4bf5345837dac0f035bbe2f221eb770d7e7c96be3496acab98b0228ddef7a58aaea06e1bb60778faad0219128e3dcbcd653ed749ee0076a880249c1a31f5c976e2937f6aa3017c9de011349e7271299c9f06a132076c56071c9cd4f04bce1"}, 0x70, 0x1c00) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r13, 0xae80, 0x0) restart_syscall() ioctl$KVM_RUN(r13, 0xae80, 0x0) 15:18:52 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4048001) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7065726d70726f66696c652021637075a5000000008363714967c96e8273657400"], 0x14) 15:18:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0x2, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10003, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x20000) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x1850, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028001400000019000540000000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r3, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @remote}}}, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:18:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0xc8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000001c0)=""/85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:53 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x1850, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028001400000019000540000000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={r6, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r6, 0x3, 0x81, 0x30000000}, 0x10) r7 = getpid() ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000a40)=""/4096) sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @local, 0x1}, @in6={0xa, 0x4e24, 0xffff, @mcast2, 0x4}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x26}, 0x3}], 0x54) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='fd/4\x00', &(0x7f0000000100)='keyringGPLcgroup\x00', 0x0) clone(0x810000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:53 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x22000, 0x0) bind(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x1, 0x2, 0x3}}, 0x80) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) fspick(r0, &(0x7f0000000100)='./file0\x00', 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) inotify_add_watch(r3, &(0x7f0000000280)='./file0\x00', 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x40002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000340)={0x10000, 0x4, 0x8, 0xee, 0x3f, 0x19620}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000180)={'hwsim0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15:18:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x2fc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4900}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x192c000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x71b46343}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x730f}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf184}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:53 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x6, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/226, 0xe2) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) ioctl$FBIOBLANK(r1, 0x4611, 0x0) 15:18:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x2fc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4900}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x192c000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x71b46343}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x730f}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf184}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:18:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x1, @loopback}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x7}, @in6={0xa, 0x4e21, 0x80000000, @mcast2, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x2, @empty, 0x1}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x6}], 0xdc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x8000, 0x4}, {0xfffffff8, 0x5}]}, 0x14, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/234) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x20, 0x9, 0x0, 0x40, 0x1, 0x5}) 15:18:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:18:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="6bae68d163a3e5d6c044d0652035489be3ecb70911fe72346f6019a940b291afb5d867ab604de17431c9ab110fb8fdc49d759f1d6aafd990a01432ab578110010fe27e9b06c80169364bc2b04eb3ca775a59189515acd21a902245804f0bffd7b886cc5dc50d2787e886a1122b4e087a210ab91e96", 0x75}, 0xff8b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x8001}, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000280)={0xff, 0x5}) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x37, &(0x7f0000000100), &(0x7f0000000200)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:54 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2002, &(0x7f0000000940)=""/243) 15:18:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x101000, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x1850, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028001400000019000540000000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000040)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r5, 0x2, 0xffffffff, 0x7}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x100, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1360.678322][ C1] net_ratelimit: 14 callbacks suppressed [ 1360.678330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1360.678375][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1360.684062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1360.758324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1360.758341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1360.764124][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:55 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1360.954764][T26552] Unknown ioctl 44609 [ 1360.998101][T26549] Unknown ioctl 1075883590 15:18:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000004201000001800000000000000000000000000000060000000000000005000000000000003f0000000000000004000000000000000104fffffff500000104000000000000010000000000000006000000000000005002b17111f950efcaaa2ab7b8f62a270d5291"]) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x180400) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x80000001, 0x3, 0x2, 0x1, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:18:55 executing program 3 (fault-call:1 fault-nth:0): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:18:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 1361.398296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1361.404174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1361.443696][T26581] FAULT_INJECTION: forcing a failure. [ 1361.443696][T26581] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1361.515831][T26581] CPU: 0 PID: 26581 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1361.524656][T26581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.524663][T26581] Call Trace: [ 1361.524687][T26581] dump_stack+0x197/0x210 [ 1361.524713][T26581] should_fail.cold+0xa/0x15 [ 1361.524735][T26581] ? fault_create_debugfs_attr+0x180/0x180 [ 1361.524751][T26581] ? __kasan_check_read+0x11/0x20 [ 1361.524765][T26581] ? __lock_acquire+0x8a0/0x4a00 [ 1361.524783][T26581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.524799][T26581] ? debug_smp_processor_id+0x33/0x18a [ 1361.524837][T26581] get_futex_key+0xd08/0x1b10 [ 1361.524858][T26581] ? find_held_lock+0x35/0x130 [ 1361.552863][T26581] ? is_bpf_text_address+0xac/0x160 [ 1361.552883][T26581] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1361.552901][T26581] ? memset+0x32/0x40 [ 1361.569067][T26581] futex_wait_requeue_pi.constprop.0+0x56e/0xa10 [ 1361.569082][T26581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.569102][T26581] ? futex_requeue+0x1940/0x1940 [ 1361.569114][T26581] ? __kasan_check_read+0x11/0x20 [ 1361.569127][T26581] ? mark_lock+0xc2/0x1220 [ 1361.569147][T26581] ? __kasan_check_read+0x11/0x20 [ 1361.569165][T26581] ? __lock_acquire+0x16f2/0x4a00 [ 1361.641317][T26581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.647574][T26581] ? debug_smp_processor_id+0x33/0x18a [ 1361.653048][T26581] ? perf_trace_lock_acquire+0xf5/0x530 [ 1361.658612][T26581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 15:18:55 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, 0x5, 0xffffffff}, &(0x7f0000000100)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x10000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000140), &(0x7f0000000200)='GPL\x00', 0x2, 0x4f, &(0x7f0000000240)=""/79, 0x41100, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x0, 0x1}, 0x10, r5, r6}, 0x78) fcntl$getownex(r7, 0x10, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0xa2a, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() syz_open_procfs(r8, &(0x7f0000000000)='net/snmp6\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000100)=0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1361.664861][T26581] ? _parse_integer+0x139/0x190 [ 1361.669751][T26581] ? get_pid_task+0x11d/0x210 [ 1361.674439][T26581] do_futex+0x27d/0x1de0 [ 1361.678692][T26581] ? __f_unlock_pos+0x19/0x20 [ 1361.683380][T26581] ? find_held_lock+0x35/0x130 [ 1361.688154][T26581] ? __f_unlock_pos+0x19/0x20 [ 1361.692838][T26581] ? futex_exit_release+0x70/0x70 [ 1361.697850][T26581] ? vfs_write+0x34c/0x5d0 [ 1361.702971][T26581] ? __kasan_check_write+0x14/0x20 [ 1361.708068][T26581] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1361.713597][T26581] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1361.718867][T26581] ? wait_for_completion+0x440/0x440 [ 1361.724146][T26581] __x64_sys_futex+0x3f7/0x590 [ 1361.728899][T26581] ? do_futex+0x1de0/0x1de0 [ 1361.733385][T26581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1361.738836][T26581] ? do_syscall_64+0x26/0x790 [ 1361.743493][T26581] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1361.749541][T26581] ? do_syscall_64+0x26/0x790 [ 1361.754200][T26581] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1361.759477][T26581] ? trace_hardirqs_on+0x67/0x240 [ 1361.764492][T26581] do_syscall_64+0xfa/0x790 [ 1361.768980][T26581] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1361.774855][T26581] RIP: 0033:0x45a909 [ 1361.778732][T26581] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1361.798317][T26581] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1361.806715][T26581] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 15:18:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1361.814666][T26581] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1361.822625][T26581] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1361.830576][T26581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1361.838537][T26581] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 [ 1361.846662][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1361.852493][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:18:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ftruncate(r2, 0xde3d) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$P9_RSTATFS(r4, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x9, 0xffff8000, 0xfe, 0x100, 0x9, 0x3, 0x1ff, 0x6, 0x2000000}}, 0x43) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:18:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 15:18:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) 15:18:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x8c.#system'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '(posix_acl_access'}, {0x20, '!vboxnet1ppp0:/'}, {0x20, 'keyring'}], 0xa, "66ee45f44a89d80906ec82f1201dbae8a7a70e6ff0938dd357e7f2898e3d4fa89a8367"}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x21, 0x400) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0xd0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) futimesat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x77359400}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1362.227054][T26587] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1362.324672][T26587] CPU: 0 PID: 26587 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1362.333416][T26587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.343491][T26587] Call Trace: [ 1362.346801][T26587] dump_stack+0x197/0x210 [ 1362.351145][T26587] dump_header+0x10b/0x82d [ 1362.355580][T26587] oom_kill_process.cold+0x10/0x15 [ 1362.360705][T26587] out_of_memory+0x334/0x13c0 [ 1362.365386][T26587] ? find_held_lock+0x35/0x130 [ 1362.370160][T26587] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1362.375981][T26587] ? oom_killer_disable+0x280/0x280 [ 1362.381197][T26587] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1362.386756][T26587] ? memcg_oom_wake_function+0x700/0x700 [ 1362.392413][T26587] ? do_raw_spin_unlock+0x178/0x270 [ 1362.397624][T26587] ? _raw_spin_unlock+0x28/0x40 [ 1362.402492][T26587] try_charge+0xf76/0x14d0 [ 1362.406919][T26587] ? find_held_lock+0x35/0x130 [ 1362.411706][T26587] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1362.417258][T26587] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1362.422811][T26587] ? find_held_lock+0x35/0x130 [ 1362.427669][T26587] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1362.433236][T26587] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1362.438792][T26587] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1362.444181][T26587] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1362.449736][T26587] __memcg_kmem_charge+0x13a/0x3a0 [ 1362.454856][T26587] __alloc_pages_nodemask+0x4f5/0x910 [ 1362.460370][T26587] ? retint_kernel+0x2b/0x2b [ 1362.465079][T26587] ? __alloc_pages_slowpath+0x2920/0x2920 15:18:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 1362.470816][T26587] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 1362.476370][T26587] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1362.482626][T26587] alloc_pages_current+0x107/0x210 [ 1362.487743][T26587] pte_alloc_one+0x1b/0x1a0 [ 1362.492255][T26587] __pte_alloc+0x20/0x310 [ 1362.496601][T26587] copy_page_range+0x1616/0x20b0 [ 1362.501568][T26587] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1362.507126][T26587] ? validate_mm_rb+0xa3/0xc0 [ 1362.511818][T26587] ? __vma_link_rb+0x5ad/0x770 [ 1362.516589][T26587] ? anon_vma_fork+0xd4/0x4a0 [ 1362.521454][T26587] dup_mm+0xa67/0x1430 [ 1362.525547][T26587] ? vm_area_dup+0x170/0x170 [ 1362.530153][T26587] ? debug_mutex_init+0x2d/0x60 [ 1362.535014][T26587] copy_process+0x2ad6/0x7230 [ 1362.539692][T26587] ? __kasan_check_read+0x11/0x20 [ 1362.544715][T26587] ? mark_lock+0xc2/0x1220 [ 1362.549237][T26587] ? __cleanup_sighand+0xc0/0xc0 [ 1362.554182][T26587] ? __might_fault+0x12b/0x1e0 [ 1362.558965][T26587] ? __might_fault+0x12b/0x1e0 [ 1362.563843][T26587] _do_fork+0x146/0x1090 [ 1362.568107][T26587] ? copy_init_mm+0x20/0x20 15:18:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1362.572621][T26587] ? __kasan_check_read+0x11/0x20 [ 1362.577649][T26587] ? _copy_to_user+0x118/0x160 [ 1362.582430][T26587] __x64_sys_clone+0x19a/0x260 [ 1362.587206][T26587] ? __ia32_sys_vfork+0xd0/0xd0 [ 1362.592168][T26587] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1362.597465][T26587] ? trace_hardirqs_on+0x67/0x240 [ 1362.602507][T26587] do_syscall_64+0xfa/0x790 [ 1362.607022][T26587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1362.612911][T26587] RIP: 0033:0x45a909 [ 1362.616809][T26587] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1362.636415][T26587] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1362.644830][T26587] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1362.652798][T26587] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.652816][T26587] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1362.668753][T26587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1362.676736][T26587] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff 15:18:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 1363.140865][T26587] memory: usage 307200kB, limit 307200kB, failcnt 4837 [ 1363.148363][T26587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1363.155520][T26587] Memory cgroup stats for /syz5: [ 1363.155867][T26587] anon 273686528 [ 1363.155867][T26587] file 151552 [ 1363.155867][T26587] kernel_stack 6082560 [ 1363.155867][T26587] slab 10469376 [ 1363.155867][T26587] sock 0 [ 1363.155867][T26587] shmem 65536 [ 1363.155867][T26587] file_mapped 0 [ 1363.155867][T26587] file_dirty 0 [ 1363.155867][T26587] file_writeback 135168 [ 1363.155867][T26587] anon_thp 253755392 [ 1363.155867][T26587] inactive_anon 135168 [ 1363.155867][T26587] active_anon 273686528 [ 1363.155867][T26587] inactive_file 122880 [ 1363.155867][T26587] active_file 45056 [ 1363.155867][T26587] unevictable 0 [ 1363.155867][T26587] slab_reclaimable 1081344 [ 1363.155867][T26587] slab_unreclaimable 9388032 [ 1363.155867][T26587] pgfault 172491 [ 1363.155867][T26587] pgmajfault 0 [ 1363.155867][T26587] workingset_refault 198 [ 1363.155867][T26587] workingset_activate 33 [ 1363.155867][T26587] workingset_nodereclaim 0 [ 1363.155867][T26587] pgrefill 2180 [ 1363.155867][T26587] pgscan 2164 [ 1363.155867][T26587] pgsteal 282 [ 1363.252487][T26587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20676,uid=0 [ 1363.273062][T26587] Memory cgroup out of memory: Killed process 20676 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:18:57 executing program 3 (fault-call:1 fault-nth:1): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:18:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x10, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:18:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x81200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="108104c62bb002337028f97f6571ef0697b7ad64f4ccf9bb2d26b328d47fed0dd1c74d43669ec631e9c157dca75567fcef8e40e83b20c10a32a1475e0992e15672c2938d97e5", 0x46}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x101fe, 0x3, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) 15:18:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x227d, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1363.458461][T26647] FAULT_INJECTION: forcing a failure. [ 1363.458461][T26647] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1363.484973][T26647] CPU: 0 PID: 26647 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1363.493703][T26647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.503766][T26647] Call Trace: 15:18:57 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000140)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40), 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)=""/117, &(0x7f0000000100)=0x75) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f00000002c0)="309db63dae42f5ec6e2028c4d123717e48121d85b163a18da18fae82222efbbcc42c178a6176b9bb7dcdf554ed7fa419e32bbff131b911b0cf1beca9a5ac045c9e7c313bc21174487f72205b38b5f80ce8467f48b94135c00ee7d5cfaa8edca3f26e6fac60a72237a3eea608a9c8cdd09a98b39ec672615695e40001b8fc099a2b5a88d0ef76a21b06d95a59358b9fc909027628165e3548befdc2960399") sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000240)) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1363.507078][T26647] dump_stack+0x197/0x210 [ 1363.511422][T26647] should_fail.cold+0xa/0x15 [ 1363.511445][T26647] ? fault_create_debugfs_attr+0x180/0x180 [ 1363.521855][T26647] ? __kasan_check_read+0x11/0x20 [ 1363.527017][T26647] ? __lock_acquire+0x8a0/0x4a00 [ 1363.531957][T26647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.538298][T26647] ? debug_smp_processor_id+0x33/0x18a [ 1363.543773][T26647] get_futex_key+0x282/0x1b10 [ 1363.548483][T26647] ? find_held_lock+0x35/0x130 [ 1363.553261][T26647] ? is_bpf_text_address+0xac/0x160 [ 1363.558468][T26647] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1363.563854][T26647] ? memset+0x32/0x40 [ 1363.567857][T26647] futex_wait_requeue_pi.constprop.0+0x56e/0xa10 [ 1363.574191][T26647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.580451][T26647] ? futex_requeue+0x1940/0x1940 [ 1363.585395][T26647] ? __kasan_check_read+0x11/0x20 [ 1363.590423][T26647] ? mark_lock+0xc2/0x1220 [ 1363.594852][T26647] ? __kasan_check_read+0x11/0x20 [ 1363.599885][T26647] ? __lock_acquire+0x16f2/0x4a00 [ 1363.604917][T26647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.611161][T26647] ? debug_smp_processor_id+0x33/0x18a [ 1363.616632][T26647] ? perf_trace_lock_acquire+0xf5/0x530 [ 1363.622185][T26647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.628451][T26647] ? _parse_integer+0x139/0x190 [ 1363.633337][T26647] ? get_pid_task+0x11d/0x210 [ 1363.638032][T26647] do_futex+0x27d/0x1de0 [ 1363.642285][T26647] ? __f_unlock_pos+0x19/0x20 [ 1363.646971][T26647] ? find_held_lock+0x35/0x130 [ 1363.651752][T26647] ? __f_unlock_pos+0x19/0x20 15:18:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) [ 1363.656448][T26647] ? futex_exit_release+0x70/0x70 [ 1363.661484][T26647] ? vfs_write+0x34c/0x5d0 [ 1363.665916][T26647] ? __kasan_check_write+0x14/0x20 [ 1363.671037][T26647] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1363.676591][T26647] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1363.681881][T26647] ? wait_for_completion+0x440/0x440 [ 1363.687183][T26647] __x64_sys_futex+0x3f7/0x590 [ 1363.691967][T26647] ? do_futex+0x1de0/0x1de0 [ 1363.696489][T26647] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1363.701958][T26647] ? do_syscall_64+0x26/0x790 [ 1363.706639][T26647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1363.712720][T26647] ? do_syscall_64+0x26/0x790 [ 1363.717491][T26647] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1363.722789][T26647] ? trace_hardirqs_on+0x67/0x240 [ 1363.727834][T26647] do_syscall_64+0xfa/0x790 [ 1363.732351][T26647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1363.738248][T26647] RIP: 0033:0x45a909 [ 1363.742148][T26647] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1363.745812][T26660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1363.762187][T26647] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1363.762217][T26647] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1363.762225][T26647] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1363.762232][T26647] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1363.762241][T26647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1363.762250][T26647] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 [ 1363.831179][T26660] CPU: 0 PID: 26660 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1363.839890][T26660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.850050][T26660] Call Trace: [ 1363.853350][T26660] dump_stack+0x197/0x210 [ 1363.857678][T26660] dump_header+0x10b/0x82d [ 1363.862099][T26660] oom_kill_process.cold+0x10/0x15 [ 1363.867366][T26660] out_of_memory+0x334/0x13c0 [ 1363.872052][T26660] ? find_held_lock+0x35/0x130 [ 1363.876870][T26660] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1363.882690][T26660] ? oom_killer_disable+0x280/0x280 [ 1363.887921][T26660] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1363.893478][T26660] ? memcg_oom_wake_function+0x700/0x700 [ 1363.899117][T26660] ? do_raw_spin_unlock+0x178/0x270 [ 1363.904408][T26660] ? _raw_spin_unlock+0x28/0x40 [ 1363.909259][T26660] try_charge+0xf76/0x14d0 [ 1363.913683][T26660] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1363.918976][T26660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1363.924530][T26660] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1363.930065][T26660] ? find_held_lock+0x35/0x130 [ 1363.934869][T26660] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1363.940413][T26660] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1363.945972][T26660] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1363.951346][T26660] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1363.956987][T26660] __memcg_kmem_charge+0x13a/0x3a0 [ 1363.962099][T26660] copy_process+0x79d/0x7230 [ 1363.966849][T26660] ? __kasan_check_read+0x11/0x20 [ 1363.971870][T26660] ? mark_lock+0xc2/0x1220 [ 1363.976322][T26660] ? __cleanup_sighand+0xc0/0xc0 [ 1363.981272][T26660] ? __might_fault+0x12b/0x1e0 [ 1363.986033][T26660] ? __might_fault+0x12b/0x1e0 [ 1363.990789][T26660] _do_fork+0x146/0x1090 [ 1363.995016][T26660] ? copy_init_mm+0x20/0x20 [ 1363.999508][T26660] ? __kasan_check_read+0x11/0x20 [ 1364.004521][T26660] ? _copy_to_user+0x118/0x160 [ 1364.009275][T26660] __x64_sys_clone+0x19a/0x260 [ 1364.014035][T26660] ? __ia32_sys_vfork+0xd0/0xd0 [ 1364.018908][T26660] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1364.024206][T26660] ? trace_hardirqs_on+0x67/0x240 [ 1364.029248][T26660] do_syscall_64+0xfa/0x790 [ 1364.033766][T26660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1364.039641][T26660] RIP: 0033:0x45a909 [ 1364.043531][T26660] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1364.063232][T26660] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1364.071627][T26660] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1364.079598][T26660] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1364.087569][T26660] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1364.095523][T26660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1364.103671][T26660] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1364.145081][T26660] memory: usage 307200kB, limit 307200kB, failcnt 4882 [ 1364.180757][T26660] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1364.187932][T26660] Memory cgroup stats for /syz5: [ 1364.207205][T26660] anon 273784832 [ 1364.207205][T26660] file 151552 [ 1364.207205][T26660] kernel_stack 6045696 [ 1364.207205][T26660] slab 10608640 [ 1364.207205][T26660] sock 0 [ 1364.207205][T26660] shmem 65536 [ 1364.207205][T26660] file_mapped 0 [ 1364.207205][T26660] file_dirty 0 [ 1364.207205][T26660] file_writeback 135168 [ 1364.207205][T26660] anon_thp 253755392 [ 1364.207205][T26660] inactive_anon 135168 [ 1364.207205][T26660] active_anon 273784832 [ 1364.207205][T26660] inactive_file 122880 [ 1364.207205][T26660] active_file 45056 [ 1364.207205][T26660] unevictable 0 [ 1364.207205][T26660] slab_reclaimable 1081344 [ 1364.207205][T26660] slab_unreclaimable 9527296 [ 1364.207205][T26660] pgfault 172557 [ 1364.207205][T26660] pgmajfault 0 [ 1364.207205][T26660] workingset_refault 198 [ 1364.207205][T26660] workingset_activate 33 [ 1364.207205][T26660] workingset_nodereclaim 0 [ 1364.207205][T26660] pgrefill 2180 [ 1364.207205][T26660] pgscan 2164 15:18:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="9447da420e778dc4f4b9560f", 0xc}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:18:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(0x0) close(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x9, 0x6, 0x7fff, 0x7fff}, 0x0, [0x0, 0x0, 0xd02e, 0x0, 0x0, 0x0, 0x40, 0xf6, 0x3, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x5f, 0xd9f5, 0x0, 0x2, 0xfff, 0x2, 0x7, 0x0, 0xb4, 0xa5, 0x0, 0x0, 0x96, 0xb6, 0x4f2, 0xd01, 0x5, 0x0, 0x793, 0x0, 0x8084, 0xb689, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xcd1, 0x8e6, 0x0, 0x0, 0x0, 0x400, 0x2619, 0x0, 0x200, 0x7d0f, 0x69bf, 0x9a, 0x0, 0x9, 0x4, 0xae11], [0x10001, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xec2d, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x8, 0x0, 0x200, 0x69d8, 0x0, 0x1, 0x8, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0xf132, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xfffffe01, 0x0, 0x7fffffff, 0x2, 0x0, 0x9, 0x0, 0x8, 0x0, 0x21, 0x4, 0xfffffffc], [0x0, 0x0, 0x0, 0xfffff001, 0x1, 0x8, 0x0, 0x4, 0xdd, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x5b78, 0x40, 0x6bca, 0x4, 0x2, 0x50, 0x9, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x3, 0xfffffffe], [0x2, 0x0, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0xfffffd00, 0x0, 0x0, 0x1ff, 0xffffffe0, 0x0, 0x0, 0xe6, 0x400, 0x800, 0x7fff, 0x0, 0x7ff, 0x0, 0x7, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x9, 0x7ff, 0xffffffef, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x6bccd350, 0x0, 0x7fffffff, 0x0, 0xd2a7, 0x1, 0x0, 0x10000, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x0, 0x40, 0x0, 0xffffffff]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) 15:18:58 executing program 3 (fault-call:1 fault-nth:2): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1364.207205][T26660] pgsteal 282 15:18:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='\x00\x03ab\x8a\xaa*\xc2\xc7', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="01040000000000000000110000000c0009000800010000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2e0, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd46}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa500}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff4f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x255}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x169}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4012}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x1, 0xef38e21e290ddcc5, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4601, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1364.320931][T26660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20624,uid=0 [ 1364.372731][T26660] Memory cgroup out of memory: Killed process 20624 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1364.440627][T26687] FAULT_INJECTION: forcing a failure. [ 1364.440627][T26687] name fail_futex, interval 1, probability 0, space 0, times 0 15:18:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x1, 0xff, 0x1, 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x4e23, @empty}}) ioctl$KDDELIO(r4, 0x4b35, 0x9) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000180)) [ 1364.563111][T26687] CPU: 0 PID: 26687 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1364.571858][T26687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.581960][T26687] Call Trace: [ 1364.585273][T26687] dump_stack+0x197/0x210 [ 1364.589635][T26687] should_fail.cold+0xa/0x15 [ 1364.594276][T26687] ? fault_create_debugfs_attr+0x180/0x180 [ 1364.600109][T26687] ? __lock_acquire+0x8a0/0x4a00 [ 1364.605096][T26687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.606559][T26654] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1364.611357][T26687] ? debug_smp_processor_id+0x33/0x18a [ 1364.611382][T26687] get_futex_key+0x11a7/0x1b10 [ 1364.611408][T26687] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1364.637176][T26687] ? memset+0x32/0x40 [ 1364.641194][T26687] futex_wait_requeue_pi.constprop.0+0x56e/0xa10 [ 1364.647549][T26687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.653811][T26687] ? futex_requeue+0x1940/0x1940 [ 1364.658766][T26687] ? __kasan_check_read+0x11/0x20 [ 1364.663799][T26687] ? mark_lock+0xc2/0x1220 [ 1364.668228][T26687] ? __kasan_check_read+0x11/0x20 [ 1364.673252][T26687] ? __lock_acquire+0x16f2/0x4a00 [ 1364.678273][T26687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.684528][T26687] ? debug_smp_processor_id+0x33/0x18a [ 1364.689989][T26687] ? perf_trace_lock_acquire+0xf5/0x530 [ 1364.695533][T26687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.701760][T26687] ? _parse_integer+0x139/0x190 [ 1364.706618][T26687] ? get_pid_task+0x11d/0x210 [ 1364.711291][T26687] do_futex+0x27d/0x1de0 [ 1364.715526][T26687] ? __f_unlock_pos+0x19/0x20 [ 1364.720192][T26687] ? find_held_lock+0x35/0x130 [ 1364.724946][T26687] ? __f_unlock_pos+0x19/0x20 [ 1364.729650][T26687] ? futex_exit_release+0x70/0x70 [ 1364.734703][T26687] ? vfs_write+0x34c/0x5d0 [ 1364.739139][T26687] ? __kasan_check_write+0x14/0x20 [ 1364.744250][T26687] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1364.749789][T26687] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1364.755069][T26687] ? wait_for_completion+0x440/0x440 [ 1364.760352][T26687] __x64_sys_futex+0x3f7/0x590 [ 1364.765107][T26687] ? do_futex+0x1de0/0x1de0 [ 1364.769597][T26687] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1364.775043][T26687] ? do_syscall_64+0x26/0x790 [ 1364.779705][T26687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1364.785764][T26687] ? do_syscall_64+0x26/0x790 [ 1364.790433][T26687] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1364.795722][T26687] ? trace_hardirqs_on+0x67/0x240 [ 1364.800736][T26687] do_syscall_64+0xfa/0x790 [ 1364.805233][T26687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1364.811111][T26687] RIP: 0033:0x45a909 [ 1364.814994][T26687] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1364.834619][T26687] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1364.843016][T26687] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1364.850986][T26687] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1364.858946][T26687] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1364.866904][T26687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1364.874876][T26687] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 [ 1364.882901][T26654] CPU: 1 PID: 26654 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1364.891590][T26654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.901644][T26654] Call Trace: [ 1364.904970][T26654] dump_stack+0x197/0x210 [ 1364.909313][T26654] dump_header+0x10b/0x82d [ 1364.913733][T26654] ? oom_kill_process+0x94/0x420 [ 1364.918675][T26654] oom_kill_process.cold+0x10/0x15 [ 1364.923794][T26654] out_of_memory+0x334/0x13c0 [ 1364.928474][T26654] ? find_held_lock+0x35/0x130 [ 1364.933256][T26654] ? oom_killer_disable+0x280/0x280 [ 1364.938579][T26654] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1364.944135][T26654] ? memcg_oom_wake_function+0x700/0x700 [ 1364.949770][T26654] ? do_raw_spin_unlock+0x178/0x270 [ 1364.954972][T26654] ? _raw_spin_unlock+0x28/0x40 [ 1364.959829][T26654] try_charge+0xa54/0x14d0 [ 1364.964369][T26654] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1364.969926][T26654] ? percpu_ref_tryget+0x102/0x230 [ 1364.975040][T26654] ? rcu_read_lock_held+0x9c/0xb0 [ 1364.980063][T26654] ? __kasan_check_read+0x11/0x20 [ 1364.985089][T26654] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1364.990621][T26654] mem_cgroup_try_charge+0x136/0x590 [ 1364.995893][T26654] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1365.001539][T26654] __handle_mm_fault+0x1f1f/0x3da0 [ 1365.006648][T26654] ? vm_iomap_memory+0x1a0/0x1a0 [ 1365.011569][T26654] ? handle_mm_fault+0x292/0xa50 [ 1365.016721][T26654] ? handle_mm_fault+0x7a0/0xa50 [ 1365.021664][T26654] ? __kasan_check_read+0x11/0x20 [ 1365.026689][T26654] handle_mm_fault+0x3b2/0xa50 [ 1365.031447][T26654] __do_page_fault+0x536/0xd80 [ 1365.036263][T26654] do_page_fault+0x38/0x590 [ 1365.040782][T26654] page_fault+0x39/0x40 [ 1365.044974][T26654] RIP: 0033:0x4120ff 15:18:59 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, 0x5, 0xffffffff}, &(0x7f0000000100)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x10000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000140), &(0x7f0000000200)='GPL\x00', 0x2, 0x4f, &(0x7f0000000240)=""/79, 0x41100, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x0, 0x1}, 0x10, r5, r6}, 0x78) fcntl$getownex(r7, 0x10, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0xa2a, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() syz_open_procfs(r8, &(0x7f0000000000)='net/snmp6\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000100)=0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1365.048855][T26654] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1365.068467][T26654] RSP: 002b:0000000000a6fb10 EFLAGS: 00010206 [ 1365.074553][T26654] RAX: 00007f4c4044c000 RBX: 0000000000020000 RCX: 000000000045a95a [ 1365.082523][T26654] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1365.090542][T26654] RBP: 0000000000a6fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 1365.098500][T26654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fce0 [ 1365.106475][T26654] R13: 00007f4c4046c700 R14: 0000000000000001 R15: 000000000075bfd4 [ 1365.138609][T26654] memory: usage 304904kB, limit 307200kB, failcnt 4882 [ 1365.192008][T26654] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 15:18:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdb8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffca00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:18:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4c00, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1365.322698][T26654] Memory cgroup stats for /syz5: [ 1365.322806][T26654] anon 271646720 [ 1365.322806][T26654] file 151552 [ 1365.322806][T26654] kernel_stack 6045696 [ 1365.322806][T26654] slab 10608640 [ 1365.322806][T26654] sock 0 [ 1365.322806][T26654] shmem 65536 [ 1365.322806][T26654] file_mapped 0 [ 1365.322806][T26654] file_dirty 0 [ 1365.322806][T26654] file_writeback 135168 [ 1365.322806][T26654] anon_thp 251658240 [ 1365.322806][T26654] inactive_anon 135168 [ 1365.322806][T26654] active_anon 271646720 [ 1365.322806][T26654] inactive_file 122880 [ 1365.322806][T26654] active_file 45056 [ 1365.322806][T26654] unevictable 0 [ 1365.322806][T26654] slab_reclaimable 1081344 [ 1365.322806][T26654] slab_unreclaimable 9527296 [ 1365.322806][T26654] pgfault 172557 [ 1365.322806][T26654] pgmajfault 0 [ 1365.322806][T26654] workingset_refault 198 [ 1365.322806][T26654] workingset_activate 33 [ 1365.322806][T26654] workingset_nodereclaim 0 [ 1365.322806][T26654] pgrefill 2180 [ 1365.322806][T26654] pgscan 2164 [ 1365.322806][T26654] pgsteal 282 15:18:59 executing program 3 (fault-call:1 fault-nth:3): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1365.713595][T26732] FAULT_INJECTION: forcing a failure. [ 1365.713595][T26732] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1365.724751][T26654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20577,uid=0 [ 1365.747382][T26732] CPU: 0 PID: 26732 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1365.756140][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.766189][T26732] Call Trace: [ 1365.766214][T26732] dump_stack+0x197/0x210 [ 1365.766239][T26732] should_fail.cold+0xa/0x15 [ 1365.766260][T26732] ? fault_create_debugfs_attr+0x180/0x180 [ 1365.778460][T26732] ? get_user_pages_fast+0x21a/0x570 [ 1365.778480][T26732] ? get_futex_key+0x2b8/0x1b10 [ 1365.778493][T26732] ? get_user_pages_fast+0x21a/0x570 [ 1365.778507][T26732] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1365.778526][T26732] get_futex_key+0xd08/0x1b10 [ 1365.789705][T26732] ? should_fail+0x1de/0x852 [ 1365.789729][T26732] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1365.789742][T26732] ? __lock_acquire+0x8a0/0x4a00 [ 1365.789764][T26732] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1365.795977][T26654] Memory cgroup out of memory: Killed process 20577 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1365.799871][T26732] futex_wait_setup+0xd8/0x390 [ 1365.799892][T26732] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1365.799909][T26732] ? futex_cleanup+0xe50/0xe50 [ 1365.799922][T26732] ? memset+0x32/0x40 [ 1365.799945][T26732] futex_wait_requeue_pi.constprop.0+0x5c0/0xa10 [ 1365.809870][T26732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1365.809892][T26732] ? futex_requeue+0x1940/0x1940 [ 1365.809904][T26732] ? __kasan_check_read+0x11/0x20 [ 1365.809918][T26732] ? mark_lock+0xc2/0x1220 [ 1365.809937][T26732] ? __kasan_check_read+0x11/0x20 [ 1365.899503][T26732] ? __lock_acquire+0x16f2/0x4a00 [ 1365.904568][T26732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1365.910816][T26732] ? debug_smp_processor_id+0x33/0x18a [ 1365.916293][T26732] ? perf_trace_lock_acquire+0xf5/0x530 [ 1365.921851][T26732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1365.928101][T26732] ? _parse_integer+0x139/0x190 [ 1365.932997][T26732] ? get_pid_task+0x11d/0x210 [ 1365.937687][T26732] do_futex+0x27d/0x1de0 [ 1365.941945][T26732] ? __f_unlock_pos+0x19/0x20 [ 1365.946627][T26732] ? find_held_lock+0x35/0x130 [ 1365.951401][T26732] ? __f_unlock_pos+0x19/0x20 [ 1365.956099][T26732] ? futex_exit_release+0x70/0x70 15:19:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4c01, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) init_module(&(0x7f0000000140)='/dev/kvm\x00', 0x9, &(0x7f0000000180)='/dev/kvm\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x1, 0x101000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0xffff0000, 0xfffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x40, 0x8000, 0x1420c, 0xfffffffc, 0x9, 0x81, 0x1, 0x67314573, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r6, 0x0, 0x20}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000200)=0x40, 0x4) [ 1365.961140][T26732] ? vfs_write+0x34c/0x5d0 [ 1365.965568][T26732] ? __kasan_check_write+0x14/0x20 [ 1365.970686][T26732] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1365.976237][T26732] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1365.981523][T26732] ? wait_for_completion+0x440/0x440 [ 1365.981552][T26732] __x64_sys_futex+0x3f7/0x590 [ 1365.981573][T26732] ? do_futex+0x1de0/0x1de0 [ 1365.981593][T26732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1365.991651][T26732] ? do_syscall_64+0x26/0x790 [ 1366.006343][T26732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 15:19:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x1ff, 0x0, 0x3000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x4, 0x470, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000100), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0x7fffffffffffffff, 0x1, [{0x3, 0x2, 0x9099, 'nlmon0\x00', 'vlan0\x00', 'veth1_to_team\x00', 'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x101, 0xff, 0x0, 0x7f], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x101, 0x0, 0xff], 0xae, 0xae, 0xde, [@devgroup={'devgroup\x00', 0x18, {{0x2, 0x2, 0x7, 0x1f, 0xffffffff}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x2, 0x0, 'teql0\x00', 'bridge_slave_0\x00', 'ip_vti0\x00', 'ip6_vti0\x00', @random="dc26745044af", [0x7f, 0x181, 0x0, 0x7f], @broadcast, [0x90d632cd0a97652c, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x9, 'team0\x00', 'bcsf0\x00', 'ip6gre0\x00', 'veth1_to_bond\x00', @empty, [0x0, 0x0, 0x1fe, 0x0, 0xff, 0xff], @dev={[], 0x11}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x8000, 0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}, {0x0, 0x10, 0x883e, 'ip6gre0\x00', 'team0\x00', 'ip6gre0\x00', 'bpq0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0x80], @empty, [0x0, 0x0, 0xff, 0x1fe], 0xfe, 0xfe, 0x146, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@dev={0xfe, 0x80, [], 0xc}, [0xffffff, 0xffffff00, 0x0, 0x409ff3fc165008b5], 0x4e24, 0x2f, 0x7, 0x4e20, 0x4, 0x10}}}, @connbytes={'connbytes\x00', 0x18, {{0xfffffffffffffee1, 0x0, 0x3, 0x2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x81, 0x4}}}}]}]}, 0x4e8) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000180)={0x6}) 15:19:00 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x80, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x6, 0x800000000000}, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x10000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) syz_open_dev$media(0x0, 0x1, 0x4040) syz_open_dev$admmidi(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, 0x761e, 0x2, 0x2, 0x8000, 0x1}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @rand_addr=0x9}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='bond_slave_0\x00', 0x2, 0x9, 0x8}) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x1000, "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"}, &(0x7f0000000000)=0x1024) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6, 0x0, 0x1, 0x5, 0x0, 0x1, 0x8000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x6, @perf_config_ext={0x3, 0x1}, 0x77972d4e7cb2243d, 0x100, 0x0, 0x9, 0xecf, 0x8, 0x400}, r5, 0xc, 0xffffffffffffffff, 0x2) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1366.012422][T26732] ? do_syscall_64+0x26/0x790 [ 1366.017112][T26732] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1366.022414][T26732] ? trace_hardirqs_on+0x67/0x240 [ 1366.027475][T26732] do_syscall_64+0xfa/0x790 [ 1366.032012][T26732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.037908][T26732] RIP: 0033:0x45a909 [ 1366.041808][T26732] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1366.061438][T26732] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1366.069862][T26732] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1366.077842][T26732] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1366.085822][T26732] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1366.093779][T26732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1366.101737][T26732] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 15:19:00 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000140)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40), 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)=""/117, &(0x7f0000000100)=0x75) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f00000002c0)="309db63dae42f5ec6e2028c4d123717e48121d85b163a18da18fae82222efbbcc42c178a6176b9bb7dcdf554ed7fa419e32bbff131b911b0cf1beca9a5ac045c9e7c313bc21174487f72205b38b5f80ce8467f48b94135c00ee7d5cfaa8edca3f26e6fac60a72237a3eea608a9c8cdd09a98b39ec672615695e40001b8fc099a2b5a88d0ef76a21b06d95a59358b9fc909027628165e3548befdc2960399") sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000240)) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5421, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1366.198340][ C1] net_ratelimit: 19 callbacks suppressed [ 1366.198349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1366.209886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1366.220379][T26741] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 15:19:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000100)='\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) splice(r3, &(0x7f0000000180)=0x2, r5, &(0x7f00000001c0)=0x800, 0x10001, 0xe) 15:19:00 executing program 3 (fault-call:1 fault-nth:4): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1366.488436][T26741] CPU: 1 PID: 26741 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1366.497184][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.507238][T26741] Call Trace: [ 1366.510548][T26741] dump_stack+0x197/0x210 [ 1366.514890][T26741] dump_header+0x10b/0x82d [ 1366.519318][T26741] ? oom_kill_process+0x94/0x420 [ 1366.524272][T26741] oom_kill_process.cold+0x10/0x15 [ 1366.529398][T26741] out_of_memory+0x334/0x13c0 [ 1366.534953][T26741] ? find_held_lock+0x35/0x130 [ 1366.539726][T26741] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.545543][T26741] ? oom_killer_disable+0x280/0x280 [ 1366.550765][T26741] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1366.556322][T26741] ? memcg_oom_wake_function+0x700/0x700 [ 1366.561971][T26741] ? do_raw_spin_unlock+0x178/0x270 [ 1366.567183][T26741] ? _raw_spin_unlock+0x28/0x40 [ 1366.572059][T26741] try_charge+0xf76/0x14d0 [ 1366.576476][T26741] ? find_held_lock+0x35/0x130 [ 1366.581262][T26741] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 15:19:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5434, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1366.586813][T26741] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1366.592361][T26741] ? find_held_lock+0x35/0x130 [ 1366.597129][T26741] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1366.602697][T26741] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1366.608248][T26741] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1366.613632][T26741] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1366.619182][T26741] __memcg_kmem_charge+0x13a/0x3a0 [ 1366.624288][T26741] copy_process+0x79d/0x7230 [ 1366.628868][T26741] ? find_held_lock+0x35/0x130 [ 1366.633633][T26741] ? __cleanup_sighand+0xc0/0xc0 [ 1366.638563][T26741] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1366.644722][T26741] ? __kasan_check_read+0x11/0x20 [ 1366.649731][T26741] ? __lock_acquire+0x8a0/0x4a00 [ 1366.654669][T26741] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1366.660636][T26741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1366.666861][T26741] ? debug_smp_processor_id+0x33/0x18a [ 1366.672308][T26741] _do_fork+0x146/0x1090 [ 1366.676551][T26741] ? copy_init_mm+0x20/0x20 [ 1366.681046][T26741] ? lock_downgrade+0x920/0x920 [ 1366.685885][T26741] __x64_sys_clone+0x19a/0x260 [ 1366.690634][T26741] ? __ia32_sys_vfork+0xd0/0xd0 [ 1366.695467][T26741] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1366.701081][T26741] ? mem_cgroup_handle_over_high+0x21b/0x2a0 [ 1366.707049][T26741] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1366.712322][T26741] ? trace_hardirqs_on+0x67/0x240 [ 1366.717351][T26741] do_syscall_64+0xfa/0x790 [ 1366.721865][T26741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.727776][T26741] RIP: 0033:0x45d2d9 [ 1366.731665][T26741] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1366.751262][T26741] RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1366.759660][T26741] RAX: ffffffffffffffda RBX: 00007f4c4046c700 RCX: 000000000045d2d9 [ 1366.767615][T26741] RDX: 00007f4c4046c9d0 RSI: 00007f4c4046bdb0 RDI: 00000000003d0f00 [ 1366.775570][T26741] RBP: 0000000000a6fce0 R08: 00007f4c4046c700 R09: 00007f4c4046c700 [ 1366.783524][T26741] R10: 00007f4c4046c9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1366.791480][T26741] R13: 0000000000a6fb7f R14: 00007f4c4046c9c0 R15: 000000000075bfd4 15:19:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0xe39, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x6000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1366.909789][T26782] FAULT_INJECTION: forcing a failure. [ 1366.909789][T26782] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1366.924362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1366.931824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1366.998343][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.031837][T26782] CPU: 0 PID: 26782 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1367.040568][T26782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.050633][T26782] Call Trace: [ 1367.053928][T26782] dump_stack+0x197/0x210 [ 1367.058265][T26782] should_fail.cold+0xa/0x15 [ 1367.062870][T26782] ? fault_create_debugfs_attr+0x180/0x180 [ 1367.068719][T26782] ? get_user_pages_fast+0x21a/0x570 [ 1367.074010][T26782] ? get_futex_key+0x2b8/0x1b10 [ 1367.078863][T26782] ? get_user_pages_fast+0x21a/0x570 [ 1367.084139][T26782] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1367.089429][T26782] get_futex_key+0x282/0x1b10 [ 1367.094097][T26782] ? should_fail+0x1de/0x852 [ 1367.098677][T26782] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1367.104043][T26782] ? __lock_acquire+0x8a0/0x4a00 [ 1367.108969][T26782] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1367.115197][T26782] futex_wait_setup+0xd8/0x390 [ 1367.119963][T26782] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1367.125316][T26782] ? futex_cleanup+0xe50/0xe50 [ 1367.130065][T26782] ? memset+0x32/0x40 [ 1367.134050][T26782] futex_wait_requeue_pi.constprop.0+0x5c0/0xa10 [ 1367.140363][T26782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1367.146601][T26782] ? futex_requeue+0x1940/0x1940 [ 1367.151694][T26782] ? __kasan_check_read+0x11/0x20 [ 1367.156699][T26782] ? mark_lock+0xc2/0x1220 [ 1367.161102][T26782] ? __kasan_check_read+0x11/0x20 [ 1367.166121][T26782] ? __lock_acquire+0x16f2/0x4a00 [ 1367.171131][T26782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1367.177371][T26782] ? debug_smp_processor_id+0x33/0x18a [ 1367.183016][T26782] ? perf_trace_lock_acquire+0xf5/0x530 [ 1367.188559][T26782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1367.194808][T26782] ? _parse_integer+0x139/0x190 [ 1367.199674][T26782] ? get_pid_task+0x11d/0x210 [ 1367.204348][T26782] do_futex+0x27d/0x1de0 [ 1367.208757][T26782] ? __f_unlock_pos+0x19/0x20 [ 1367.213425][T26782] ? find_held_lock+0x35/0x130 [ 1367.218191][T26782] ? __f_unlock_pos+0x19/0x20 [ 1367.222867][T26782] ? futex_exit_release+0x70/0x70 [ 1367.227875][T26782] ? vfs_write+0x34c/0x5d0 [ 1367.232284][T26782] ? __kasan_check_write+0x14/0x20 [ 1367.237393][T26782] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1367.242935][T26782] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1367.248216][T26782] ? wait_for_completion+0x440/0x440 [ 1367.253494][T26782] __x64_sys_futex+0x3f7/0x590 [ 1367.258249][T26782] ? do_futex+0x1de0/0x1de0 [ 1367.262740][T26782] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1367.268186][T26782] ? do_syscall_64+0x26/0x790 [ 1367.272868][T26782] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1367.278921][T26782] ? do_syscall_64+0x26/0x790 [ 1367.283583][T26782] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1367.288855][T26782] ? trace_hardirqs_on+0x67/0x240 [ 1367.293865][T26782] do_syscall_64+0xfa/0x790 [ 1367.298445][T26782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1367.304320][T26782] RIP: 0033:0x45a909 [ 1367.308228][T26782] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1367.327849][T26782] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1367.336254][T26782] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1367.344213][T26782] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1367.352184][T26782] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1367.360139][T26782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1367.368098][T26782] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 [ 1367.378499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.384303][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.390178][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:19:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5450, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1367.395959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.469708][T26741] memory: usage 307200kB, limit 307200kB, failcnt 4920 [ 1367.490306][T26741] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1367.512683][T26741] Memory cgroup stats for /syz5: [ 1367.512801][T26741] anon 273756160 [ 1367.512801][T26741] file 151552 [ 1367.512801][T26741] kernel_stack 6045696 [ 1367.512801][T26741] slab 10608640 [ 1367.512801][T26741] sock 0 [ 1367.512801][T26741] shmem 65536 [ 1367.512801][T26741] file_mapped 0 [ 1367.512801][T26741] file_dirty 0 [ 1367.512801][T26741] file_writeback 135168 [ 1367.512801][T26741] anon_thp 251658240 [ 1367.512801][T26741] inactive_anon 135168 [ 1367.512801][T26741] active_anon 273756160 [ 1367.512801][T26741] inactive_file 122880 [ 1367.512801][T26741] active_file 45056 15:19:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@int=0x7fffffff, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2000, 0x0) 15:19:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5451, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1367.512801][T26741] unevictable 0 [ 1367.512801][T26741] slab_reclaimable 1081344 [ 1367.512801][T26741] slab_unreclaimable 9527296 [ 1367.512801][T26741] pgfault 172689 [ 1367.512801][T26741] pgmajfault 0 [ 1367.512801][T26741] workingset_refault 198 [ 1367.512801][T26741] workingset_activate 33 [ 1367.512801][T26741] workingset_nodereclaim 0 [ 1367.512801][T26741] pgrefill 2180 [ 1367.512801][T26741] pgscan 2164 [ 1367.512801][T26741] pgsteal 282 [ 1367.619766][T26741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26736,uid=0 [ 1367.638298][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.642076][T26741] Memory cgroup out of memory: Killed process 26736 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:01 executing program 3 (fault-call:1 fault-nth:5): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:01 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, 0x5, 0xffffffff}, &(0x7f0000000100)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x10000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000140), &(0x7f0000000200)='GPL\x00', 0x2, 0x4f, &(0x7f0000000240)=""/79, 0x41100, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x0, 0x1}, 0x10, r5, r6}, 0x78) fcntl$getownex(r7, 0x10, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0xa2a, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() syz_open_procfs(r8, &(0x7f0000000000)='net/snmp6\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000100)=0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1367.814742][T26748] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1367.889995][T26820] FAULT_INJECTION: forcing a failure. [ 1367.889995][T26820] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1367.916892][T26820] CPU: 0 PID: 26820 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1367.925628][T26820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.935694][T26820] Call Trace: [ 1367.938996][T26820] dump_stack+0x197/0x210 [ 1367.939024][T26820] should_fail.cold+0xa/0x15 [ 1367.939044][T26820] ? fault_create_debugfs_attr+0x180/0x180 [ 1367.953788][T26820] ? get_user_pages_fast+0x21a/0x570 [ 1367.959091][T26820] ? get_futex_key+0x2b8/0x1b10 [ 1367.963964][T26820] ? get_user_pages_fast+0x21a/0x570 [ 1367.969265][T26820] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1367.974592][T26820] get_futex_key+0x11a7/0x1b10 [ 1367.979379][T26820] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1367.984768][T26820] ? __lock_acquire+0x8a0/0x4a00 [ 1367.989727][T26820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1367.996002][T26820] futex_wait_setup+0xd8/0x390 [ 1368.000764][T26820] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 1368.006128][T26820] ? futex_cleanup+0xe50/0xe50 [ 1368.010879][T26820] ? memset+0x32/0x40 [ 1368.014856][T26820] futex_wait_requeue_pi.constprop.0+0x5c0/0xa10 [ 1368.021194][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1368.027442][T26820] ? futex_requeue+0x1940/0x1940 [ 1368.032479][T26820] ? __kasan_check_read+0x11/0x20 [ 1368.037502][T26820] ? mark_lock+0xc2/0x1220 [ 1368.041924][T26820] ? __kasan_check_read+0x11/0x20 [ 1368.046939][T26820] ? __lock_acquire+0x16f2/0x4a00 [ 1368.051959][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1368.058188][T26820] ? debug_smp_processor_id+0x33/0x18a [ 1368.063658][T26820] ? perf_trace_lock_acquire+0xf5/0x530 [ 1368.069218][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1368.075446][T26820] ? _parse_integer+0x139/0x190 [ 1368.080324][T26820] ? get_pid_task+0x11d/0x210 [ 1368.084997][T26820] do_futex+0x27d/0x1de0 [ 1368.089228][T26820] ? __f_unlock_pos+0x19/0x20 [ 1368.093890][T26820] ? find_held_lock+0x35/0x130 [ 1368.098643][T26820] ? __f_unlock_pos+0x19/0x20 [ 1368.103313][T26820] ? futex_exit_release+0x70/0x70 [ 1368.108333][T26820] ? vfs_write+0x34c/0x5d0 [ 1368.112747][T26820] ? __kasan_check_write+0x14/0x20 [ 1368.117850][T26820] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1368.123387][T26820] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1368.128688][T26820] ? wait_for_completion+0x440/0x440 [ 1368.134070][T26820] __x64_sys_futex+0x3f7/0x590 [ 1368.138830][T26820] ? do_futex+0x1de0/0x1de0 [ 1368.143322][T26820] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1368.148773][T26820] ? do_syscall_64+0x26/0x790 [ 1368.153439][T26820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.159492][T26820] ? do_syscall_64+0x26/0x790 [ 1368.164159][T26820] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1368.169435][T26820] ? trace_hardirqs_on+0x67/0x240 [ 1368.174467][T26820] do_syscall_64+0xfa/0x790 [ 1368.178976][T26820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.184983][T26820] RIP: 0033:0x45a909 [ 1368.188878][T26820] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1368.208484][T26820] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1368.216887][T26820] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1368.224850][T26820] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1368.232834][T26820] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1368.240806][T26820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1368.248789][T26820] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 [ 1368.256770][T26748] CPU: 1 PID: 26748 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1368.265460][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.275553][T26748] Call Trace: [ 1368.278865][T26748] dump_stack+0x197/0x210 [ 1368.283221][T26748] dump_header+0x10b/0x82d [ 1368.287659][T26748] oom_kill_process.cold+0x10/0x15 [ 1368.292787][T26748] out_of_memory+0x334/0x13c0 [ 1368.297475][T26748] ? find_held_lock+0x35/0x130 [ 1368.302250][T26748] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1368.308062][T26748] ? oom_killer_disable+0x280/0x280 [ 1368.313281][T26748] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1368.318836][T26748] ? memcg_oom_wake_function+0x700/0x700 [ 1368.324485][T26748] ? do_raw_spin_unlock+0x178/0x270 [ 1368.329693][T26748] ? _raw_spin_unlock+0x28/0x40 [ 1368.334554][T26748] try_charge+0xf76/0x14d0 [ 1368.338998][T26748] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1368.344554][T26748] ? percpu_ref_tryget+0x102/0x230 [ 1368.349669][T26748] ? rcu_read_lock_held+0x9c/0xb0 [ 1368.354700][T26748] ? __kasan_check_read+0x11/0x20 [ 1368.359822][T26748] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1368.365387][T26748] mem_cgroup_try_charge+0x136/0x590 [ 1368.370693][T26748] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1368.376340][T26748] do_huge_pmd_wp_page_fallback+0x24f/0x17f0 [ 1368.382334][T26748] ? perf_trace_lock_acquire+0xf5/0x530 [ 1368.387897][T26748] ? defrag_store+0x360/0x360 [ 1368.392589][T26748] ? lock_downgrade+0x920/0x920 [ 1368.397450][T26748] ? swp_swapcount+0x540/0x540 [ 1368.402213][T26748] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 1368.408115][T26748] ? do_raw_spin_unlock+0x178/0x270 [ 1368.413323][T26748] do_huge_pmd_wp_page+0x803/0x21c0 [ 1368.418527][T26748] ? perf_trace_lock_acquire+0xf5/0x530 [ 1368.424078][T26748] ? __lock_acquire+0x8a0/0x4a00 [ 1368.429027][T26748] ? __split_huge_pmd+0x2e90/0x2e90 [ 1368.434231][T26748] ? __kasan_check_read+0x11/0x20 [ 1368.439261][T26748] ? mark_lock+0xc2/0x1220 [ 1368.443710][T26748] ? find_held_lock+0x35/0x130 [ 1368.448495][T26748] ? __kasan_check_read+0x11/0x20 [ 1368.453711][T26748] ? pmd_val+0x85/0x100 [ 1368.457885][T26748] ? fault_around_bytes_set+0xa0/0xa0 [ 1368.463284][T26748] __handle_mm_fault+0x22e8/0x3da0 [ 1368.468424][T26748] ? vm_iomap_memory+0x1a0/0x1a0 [ 1368.473388][T26748] ? handle_mm_fault+0x292/0xa50 [ 1368.478346][T26748] ? handle_mm_fault+0x7a0/0xa50 [ 1368.483304][T26748] ? __kasan_check_read+0x11/0x20 [ 1368.488341][T26748] handle_mm_fault+0x3b2/0xa50 [ 1368.493240][T26748] __do_page_fault+0x536/0xd80 [ 1368.498014][T26748] do_page_fault+0x38/0x590 [ 1368.502522][T26748] page_fault+0x39/0x40 [ 1368.506675][T26748] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1368.513008][T26748] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1368.532950][T26748] RSP: 0018:ffffc90007f2fe68 EFLAGS: 00010202 [ 1368.539026][T26748] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 1368.546990][T26748] RDX: 0000000000000002 RSI: ffff888055b10000 RDI: 0000000020000940 [ 1368.554950][T26748] RBP: ffffc90007f2fea0 R08: 1ffff1100ab62000 R09: ffffed100ab62001 [ 1368.563072][T26748] R10: ffffed100ab62000 R11: ffff888055b10001 R12: 0000000020000940 [ 1368.571037][T26748] R13: ffff888055b10000 R14: 0000000020000942 R15: 00007ffffffff000 [ 1368.579032][T26748] ? _copy_to_user+0x146/0x160 [ 1368.583840][T26748] __x64_sys_mincore+0x3ec/0x890 [ 1368.588792][T26748] do_syscall_64+0xfa/0x790 [ 1368.593308][T26748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.599198][T26748] RIP: 0033:0x45a909 [ 1368.603088][T26748] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1368.622674][T26748] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1368.631070][T26748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 1368.639045][T26748] RDX: 0000000020000940 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 1368.647019][T26748] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1368.655003][T26748] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1368.662975][T26748] R13: 00000000004c7b36 R14: 00000000004de858 R15: 00000000ffffffff [ 1368.675625][T26748] memory: usage 307200kB, limit 307200kB, failcnt 4964 [ 1368.682772][T26748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1368.689918][T26748] Memory cgroup stats for /syz5: [ 1368.690036][T26748] anon 271646720 [ 1368.690036][T26748] file 151552 [ 1368.690036][T26748] kernel_stack 6082560 [ 1368.690036][T26748] slab 10608640 [ 1368.690036][T26748] sock 0 [ 1368.690036][T26748] shmem 65536 [ 1368.690036][T26748] file_mapped 0 [ 1368.690036][T26748] file_dirty 0 [ 1368.690036][T26748] file_writeback 135168 [ 1368.690036][T26748] anon_thp 251658240 [ 1368.690036][T26748] inactive_anon 135168 [ 1368.690036][T26748] active_anon 271728640 [ 1368.690036][T26748] inactive_file 122880 [ 1368.690036][T26748] active_file 45056 [ 1368.690036][T26748] unevictable 0 [ 1368.690036][T26748] slab_reclaimable 1081344 [ 1368.690036][T26748] slab_unreclaimable 9527296 [ 1368.690036][T26748] pgfault 172689 [ 1368.690036][T26748] pgmajfault 0 [ 1368.690036][T26748] workingset_refault 198 [ 1368.690036][T26748] workingset_activate 33 [ 1368.690036][T26748] workingset_nodereclaim 0 [ 1368.690036][T26748] pgrefill 2180 [ 1368.690036][T26748] pgscan 2164 [ 1368.690036][T26748] pgsteal 282 15:19:02 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4c7b27797eada810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x0, 0x80002, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x60802, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r4, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x100, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x472f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000140)=0xa8a, 0x4) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 15:19:03 executing program 4: socketpair(0x9, 0x800, 0x80, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1, r2}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5452, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:03 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = getpgid(0x0) tkill(r0, 0x0) 15:19:03 executing program 3 (fault-call:1 fault-nth:6): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1368.786413][T26748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26741,uid=0 [ 1368.803977][T26748] Memory cgroup out of memory: Killed process 26741 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:35740kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1368.829629][ T1118] oom_reaper: reaped process 26741 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1369.014265][T26839] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1369.025878][T26846] FAULT_INJECTION: forcing a failure. [ 1369.025878][T26846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1369.040685][T26839] CPU: 0 PID: 26839 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1369.051689][T26839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.065227][T26839] Call Trace: [ 1369.069815][T26839] dump_stack+0x197/0x210 [ 1369.074135][T26839] dump_header+0x10b/0x82d [ 1369.078536][T26839] ? oom_kill_process+0x94/0x420 [ 1369.083473][T26839] oom_kill_process.cold+0x10/0x15 [ 1369.088571][T26839] out_of_memory+0x334/0x13c0 [ 1369.093231][T26839] ? find_held_lock+0x35/0x130 [ 1369.097983][T26839] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.103772][T26839] ? oom_killer_disable+0x280/0x280 [ 1369.108959][T26839] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1369.114514][T26839] ? memcg_oom_wake_function+0x700/0x700 [ 1369.120135][T26839] ? do_raw_spin_unlock+0x178/0x270 [ 1369.125317][T26839] ? _raw_spin_unlock+0x28/0x40 [ 1369.130176][T26839] try_charge+0xf76/0x14d0 [ 1369.134586][T26839] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1369.140115][T26839] ? percpu_ref_tryget+0x102/0x230 [ 1369.145234][T26839] ? rcu_read_lock_held+0x9c/0xb0 [ 1369.150242][T26839] ? __kasan_check_read+0x11/0x20 [ 1369.155270][T26839] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1369.160807][T26839] mem_cgroup_try_charge+0x136/0x590 [ 1369.166078][T26839] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1369.171696][T26839] wp_page_copy+0x407/0x1560 [ 1369.176357][T26839] ? find_held_lock+0x35/0x130 [ 1369.181131][T26839] ? follow_pfn+0x2a0/0x2a0 [ 1369.185648][T26839] ? lock_downgrade+0x920/0x920 [ 1369.190493][T26839] ? vm_normal_page+0x15d/0x3c0 [ 1369.195335][T26839] ? __pte_alloc_kernel+0x210/0x210 [ 1369.200531][T26839] ? do_raw_spin_unlock+0x178/0x270 [ 1369.205722][T26839] do_wp_page+0x543/0x1540 [ 1369.210144][T26839] ? do_raw_spin_lock+0x12a/0x2e0 [ 1369.215158][T26839] ? lock_acquire+0x190/0x410 [ 1369.219828][T26839] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1369.225206][T26839] ? fault_around_bytes_set+0xa0/0xa0 [ 1369.230588][T26839] __handle_mm_fault+0x327b/0x3da0 [ 1369.235773][T26839] ? vm_iomap_memory+0x1a0/0x1a0 [ 1369.240698][T26839] ? handle_mm_fault+0x292/0xa50 [ 1369.245630][T26839] ? handle_mm_fault+0x7a0/0xa50 [ 1369.250558][T26839] ? __kasan_check_read+0x11/0x20 [ 1369.255568][T26839] handle_mm_fault+0x3b2/0xa50 [ 1369.260411][T26839] __do_page_fault+0x536/0xd80 [ 1369.265170][T26839] do_page_fault+0x38/0x590 [ 1369.269661][T26839] page_fault+0x39/0x40 [ 1369.273813][T26839] RIP: 0033:0x40f958 [ 1369.277695][T26839] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf fa 00 4c 00 31 c0 e8 53 25 ff ff 31 ff e8 9c 21 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ee 2c 66 00 [ 1369.297301][T26839] RSP: 002b:0000000000a6fb30 EFLAGS: 00010246 [ 1369.303372][T26839] RAX: 000000004c8990db RBX: 00000000ea646bf9 RCX: 0000001b32720000 [ 1369.311348][T26839] RDX: 0000000000000000 RSI: 00000000000010db RDI: ffffffff4c8990db [ 1369.319336][T26839] RBP: 0000000000000001 R08: 000000004c8990db R09: 000000004c8990df [ 1369.327376][T26839] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1369.335360][T26839] R13: 0000000080000000 R14: 00007f4c4248e008 R15: 0000000000000001 [ 1369.356709][T26846] CPU: 0 PID: 26846 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1369.371758][T26846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.381845][T26846] Call Trace: [ 1369.381877][T26846] dump_stack+0x197/0x210 [ 1369.389484][T26846] should_fail.cold+0xa/0x15 [ 1369.389503][T26846] ? is_bpf_text_address+0xac/0x160 [ 1369.389523][T26846] ? fault_create_debugfs_attr+0x180/0x180 [ 1369.389538][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.389557][T26846] ? __lock_acquire+0x16f2/0x4a00 [ 1369.424862][T26846] ? lock_downgrade+0x920/0x920 [ 1369.431320][T26846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1369.439777][T26846] should_fail_alloc_page+0x50/0x60 [ 1369.446636][T26846] __alloc_pages_nodemask+0x1a1/0x910 [ 1369.453635][T26846] ? find_held_lock+0x35/0x130 [ 1369.458994][T26846] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1369.464729][T26846] ? lock_downgrade+0x920/0x920 [ 1369.469587][T26846] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1369.475811][T26846] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1369.482041][T26846] alloc_pages_vma+0x3ce/0x620 [ 1369.486797][T26846] do_huge_pmd_wp_page+0xb70/0x21c0 [ 1369.492005][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.497037][T26846] ? __split_huge_pmd+0x2e90/0x2e90 [ 1369.502222][T26846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1369.508464][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.513600][T26846] ? pmd_val+0x85/0x100 [ 1369.517768][T26846] ? fault_around_bytes_set+0xa0/0xa0 [ 1369.523161][T26846] __handle_mm_fault+0x22e8/0x3da0 [ 1369.528275][T26846] ? vm_iomap_memory+0x1a0/0x1a0 [ 1369.533209][T26846] ? handle_mm_fault+0x292/0xa50 [ 1369.538148][T26846] ? handle_mm_fault+0x7a0/0xa50 [ 1369.543080][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.548094][T26846] handle_mm_fault+0x3b2/0xa50 [ 1369.552868][T26846] fixup_user_fault+0x126/0x4f0 [ 1369.557746][T26846] fault_in_user_writeable+0x6c/0x90 [ 1369.563019][T26846] fixup_pi_state_owner.isra.0+0x893/0xb70 [ 1369.568818][T26846] ? futex_wait_queue_me+0x590/0x590 [ 1369.574087][T26846] ? __kasan_check_write+0x14/0x20 [ 1369.579333][T26846] ? rwlock_bug.part.0+0x90/0x90 [ 1369.584265][T26846] ? lock_acquire+0x190/0x410 [ 1369.588964][T26846] ? futex_wait_requeue_pi.constprop.0+0x692/0xa10 [ 1369.595461][T26846] fixup_owner+0xa9/0x160 [ 1369.599786][T26846] futex_wait_requeue_pi.constprop.0+0x6c6/0xa10 [ 1369.606121][T26846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1369.612356][T26846] ? futex_requeue+0x1940/0x1940 [ 1369.617277][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.622284][T26846] ? mark_lock+0xc2/0x1220 [ 1369.626696][T26846] ? __kasan_check_read+0x11/0x20 [ 1369.631704][T26846] ? __lock_acquire+0x16f2/0x4a00 [ 1369.636711][T26846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1369.642949][T26846] ? debug_smp_processor_id+0x33/0x18a [ 1369.648396][T26846] ? perf_trace_lock_acquire+0xf5/0x530 [ 1369.653925][T26846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1369.660148][T26846] ? _parse_integer+0x139/0x190 [ 1369.665000][T26846] ? get_pid_task+0x11d/0x210 [ 1369.669667][T26846] do_futex+0x27d/0x1de0 [ 1369.673895][T26846] ? __f_unlock_pos+0x19/0x20 [ 1369.678554][T26846] ? find_held_lock+0x35/0x130 [ 1369.683302][T26846] ? __f_unlock_pos+0x19/0x20 [ 1369.687984][T26846] ? futex_exit_release+0x70/0x70 [ 1369.692990][T26846] ? vfs_write+0x34c/0x5d0 [ 1369.697398][T26846] ? __kasan_check_write+0x14/0x20 [ 1369.702496][T26846] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1369.708041][T26846] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1369.713312][T26846] ? wait_for_completion+0x440/0x440 [ 1369.718598][T26846] __x64_sys_futex+0x3f7/0x590 [ 1369.723366][T26846] ? do_futex+0x1de0/0x1de0 [ 1369.727853][T26846] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1369.733298][T26846] ? do_syscall_64+0x26/0x790 [ 1369.737958][T26846] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1369.744010][T26846] ? do_syscall_64+0x26/0x790 [ 1369.748676][T26846] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1369.753954][T26846] ? trace_hardirqs_on+0x67/0x240 [ 1369.758965][T26846] do_syscall_64+0xfa/0x790 [ 1369.763456][T26846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1369.769351][T26846] RIP: 0033:0x45a909 [ 1369.773246][T26846] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1369.792937][T26846] RSP: 002b:00007f5139a8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1369.801330][T26846] RAX: ffffffffffffffda RBX: 00007f5139a8bc90 RCX: 000000000045a909 [ 1369.809297][T26846] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc 15:19:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5460, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1369.817268][T26846] RBP: 000000000075bfc8 R08: 0000000020048000 R09: 0000000000000000 [ 1369.825224][T26846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5139a8c6d4 [ 1369.833179][T26846] R13: 00000000004c15c2 R14: 00000000004d5720 R15: 0000000000000003 15:19:04 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCSBRK(r4, 0x5427) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000004880)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r8, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmmsg$sock(r6, &(0x7f0000004480)=[{{&(0x7f0000000180)=@sco={0x1f, {0x7, 0x2, 0x8, 0x6, 0x5, 0xff}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="9b94957035f5d7c6eef7b45cb248f8e455d266c7cfbc8d8d37b0ebf8139b959c42f0c922557978a0c71dc38a028b89593006a8e82f9e5da2efe9ac22d70b2e3ae130f60dcc7fea3389b13614d06bb2f10c352902d45d47690c5bac8c337cfd8983675c80faf0e071203abd038e5dcde5f4df40df8bdcee22505d1f5c87da5a5ae4091dea715ec5862c822b434618c331a7917c15d0621db5cdadc37f5990aa3ed2dd7f946ed6c33b42ccdd4113c2f802a01943a40d2288", 0xb7}, {&(0x7f00000002c0)="97fc7a1f267d544f86b602195f5b75ad3068fda553863ab8fa6c9cefa839c07bea4115ec0921409b9f35509d69bbb47ffcef8071489b05b482ea449415f1d99a1e182a00ec26f2745e3d0c1bc54203a63815800dd0400371dce9e53272e8a4d6118bfcf11a6c1fdeb1a6461006d4884499401f70548b111327c945ab8826002a87480326448a6e359d7959efb44121c17e8f69f44d86926b4bc5", 0x9a}, {&(0x7f0000000100)="d086a633561124140673aedab192a6024b4452c8a2438717918a6bd0865770f369533b5587e10e19bc65996a11946c8555", 0x31}, {&(0x7f0000000380)="22923a9aa90bdafacbb853d13eb2dd45fc8c500abeea294b912156598b3d1b9a0fe8f129da8d711a6e98308b32d8d079b10f54e85a0583bcd924e7ad4f3f0bc71f797d8aac9e524906265e9d7c35851f2741cd1c3041323433afbd04c4b25b8824c4a2dd48a2a22370d14359a3d539851926fc92f5626f39bc668af886b5343c9fd77492878c1381dda50c3b054360bf165a90fbf2cdf84e3f356735a5fdd6b726058e41df045307", 0xa8}, {&(0x7f0000000440)="ef77c1ffb087cb2ff942abc54a76e570211afc8c99abbabd3463b43998917f2720baac7482ccb618abe81a28dc81ba070720c73b02e59e090969d8d976a96d203339fb2f4adc3ed9235a82548d26ffd011bb8616c657126a684ac20e819aaff10e753fe7c2802ec0757cd902e8c64a", 0x6f}, {&(0x7f00000004c0)="f0e9f115683e4216f3142c1fee69bf65e6eaa7ce8ce57bad42eaf1155e78a1ac6d95d3070edd39dc39456248b61309fdac5e674ef9d4d86eb5bc3cbb65ebe5c9fe60c8663f05fec4c1be470496cc73d27276dae1b46fe0af262236", 0x5b}, {&(0x7f0000000540)="7e9b6fb27b99db1efe330fa51346dfee4fe5214c31b7bffdf1e6d612c984f70567b0b274c9bdbcae1735aac865ea2edda1f520e717cd120fb0817ba48958169b2ba4f6bdef31f814cbfef72eb08e0bfb62fbb51aa5c4aba7e426d81377a4ac446a2461e58a02da8759af5af712c1b32defacf6d8c7ffd6b87528478a80bcba74f4bc7d9470694c9364356da91ed2d188f611e50e", 0x94}], 0x7}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)="6087da8964323037bd772c747b4608e725c718077c740d01233f033a7c44b5c5cdc5bfc5f1b504b7af8ceb55a37706181371498551e2f5e8c21cb516289a9f75a356f6b43c68449e5581f989947de448af87f50f362a98a7445d54b64ac3e9ee0c4f695aef57b0ed0d85c3d3de4a6e204190cfc3d2c7576ce8648bedc47803b6", 0x80}], 0x1, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x30}}, {{&(0x7f0000000780)=@generic={0x4, "0a8ad9de5867defc15a832a25451a90bdb70f05752249e155a9b703f01de7cd6152d8b0a2e6e30ea161803821730f2ba7c383e2e70395af01db0e74aad8521fce492d57927a8a9364728e9d3ec82aefecc8e17987a7b4f03b22ca9ebb5bc2e1c3c9946d510fab7200443f3a3f39e7eb91987b2baaa0f18f10702aa1fdfa4"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="646130c3a7821f0f9c3b480309de0c43e51d8f3b7733dff92bb033028bcbc479", 0x20}], 0x1, &(0x7f0000000880)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f00000008c0)=@llc={0x1a, 0xf, 0xfe, 0x7f, 0x0, 0x80, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)="fd1b2c3ed219543e9a94db11a84f8b8c581256ee47657f35ec3ff0736926a0b2481913354b388aeaed583764800db75e4c75db7edbc85e81fefe38db10899d9f17afe292e11c0414ca2b8bbf4b50a07d755b315cef1a0cafb45a15b2342bbe19d38177c90567e9a46362a9797a2a24058203dee8221898fc214edeb892a90b23ef0d946424cadef4d3997b11dc3e99131e04a81a4e574ee272ab6015506545cd3eaa452bffa5ee580d434365c06bd893bd86bc9e4b6c", 0xb6}, {&(0x7f0000000a00)="2ebb64b59ecfbe5842855aaf0ebb93140f02df96826c2da810f831a7d4b5a945a46cd85e29ae6aa27a790bf80fa8f2776a7798861454f3bd35d1c86b1bf3e964a38c4a2b0006f87dad497e4e0da3933fc19b9541d8ae2683c3daf22f871d0bed278031b52055a49fc95bdc40295a67f809f4069c03c616569f10c871b37d28406f52c0f8fdf1ff0ed46aeab5066106c55b53ee25d3728cac67193d8139ccf2214fee5e9d95bfc1be052af42fb771789818e50376ac2f75e553b9a65643f6da8dcf0edec223", 0xc5}, {&(0x7f0000000b00)="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", 0x1000}], 0x3, &(0x7f0000001b40)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x94cc}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}, {{&(0x7f0000001bc0)=@hci={0x1f, r8, 0x3}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)="379fe09d39b77aa57088441eed34fcba8e32651c4af52d5035cb6ff5bea17bc053b2fb00a46946e85310552bbebdc40f6c60fbd98092f37e032484dc2d2a2bfe54509ee625f57b47d3240af73cec5966b3e4328ecd8c4a3576a2b716e1df09d0e1f413aa2cb91fd8d9c6fa524e5029f44d42f24b430275ef1aa1148139a6", 0x7e}, {&(0x7f0000001cc0)="be67dc29a6c3da44bce301976a1391374c60881badecb882c77c056e69640ecd6964376b62f86c4b291b1271a2bbf812d389d106b906b7d39af92cc33bfb2ced81684e49bc97106ddd6041b22e38027c0a376e005ee27893fb610dce8042862f4b36e087cb47ed479d75c7337775507cb23df4c6921b6a181fdb4cb3dc415e", 0x7f}, {&(0x7f0000001d40)="d3b2b04e9a601ab91062a57d80eea18a0af9810cd67206a8c0e3091b85dd1b5156d3b785ccd60958d3c52703493362e02e92e807eb204b4908835baedfcb133efea48b5e13bf266dfdb5bda6e98ec6b1fc3e18dcf19d7f5b64630462f12518baa858dd13946a69cc5eee299ed3d022455899ef48aa2ef3e045c408038264a33748997f57cb52c63eec354834c1d6f2807c34eb5077b198aa9752981722667c46ca88a946372fe4706f389ab0ddfc7b79f0d2d1d6f6c0f6fe77d666c6", 0xbc}], 0x3, &(0x7f0000001e40)=[@mark={{0x14, 0x1, 0x24, 0x87d}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4a55}}], 0x48}}, {{&(0x7f0000001ec0)=@llc={0x1a, 0x0, 0x80, 0x2, 0x4, 0x9, @dev={[], 0x27}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001f40)="813ba9cb4050843cfb4560891f983fc1a38ac533fdccac1cb45a4cf8afd310cc3253f6cb15162c56074c6e89ba0249216d3ef34e6b000c8eb8181c57549eff252ebbca9fd0da1f79f0f202ef1f713acc81950cfae436d4e38c91414f9dabf2f73cde896f63ebb3b8be4c7ae29d49995fbff1238a34049e862e485fda5f8b006ae9f185cb22e9c2e0d89bbb841f9f0389176fe25f7db8da8dfe5aefd7a26c166046891175d8a672af33239bbb90e683acffcb06990a1357d3debddae7fb514f426a92d11026a6aaf1a9afbcbb484dc8ff", 0xd0}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="b7895ce97bb072c98364d2fa99180ecedcc8ad7f1edd4ed161bf1728e21136e3e41b227e5e14c1a81c43abed91c1e210f29a5566be5ab17fb60a993b307800f8bd5cc94e50f466d064545a397b0121562030df92eeeedc08c7265f85c425b12930daf64c79ac5276acffad630f466bc5da5e4da8261628d5c48730f9", 0x7c}, {&(0x7f00000030c0)="c4d3e54706bd42d65127450bf3e7c7c1049cd00bcbc979907eb26bd96744b4b4fcafd48937527d25a774aa8ab678b105fadb4e61317745730678619bf500b55eea1a9d46f6a8a6f4a476bc51de9f751a323448", 0x53}, {&(0x7f0000003140)="13366322e4ebb31c759643bbe4f46649f41979f7597dbb96e27ed8674eb4f5de88fd547ac5a1719db46f050e6a15f001e70e35b2999fa55344068fc67c4436501c8dc98d39a19c89d4988bc5e2849e", 0x4f}, {&(0x7f00000031c0)="ba2bd96006e88c0efad08fa71c4e4b8534177864365177746d2ec640a050290549a442d62307c662a5e4205a02b6302aeb364436996d407564f91402b670f49f5ab1517fc870cdfb420120f92fcbb88c6ee73d76c8958031bc6eb2d498c03a", 0x5f}, {&(0x7f0000003240)="60dde5219d0f63ee6a7565bebdc470f287e5f844bb9e292eee5ee5f32cc429878e9bff9bf361d076ec83d8fc382798c6cdc2585c2fcddbe14814969ea7231476182297892daeb53167918de7f0d6b94e215a38603ac1e949c942a957155af149e00e1a0f942ff97ccfb5e662dadcceac9f134233f04d", 0x76}, {&(0x7f00000032c0)="d5c1b742c43cfe9950a9423a984a368c6b2f75e8b3b763d2a095e4ffe36ea65cd670a40a8c77", 0x26}], 0x8, &(0x7f0000003380)=[@mark={{0x14, 0x1, 0x24, 0x8f0000}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xa8}}, {{&(0x7f0000003440)=@l2={0x1f, 0x7, {0x83, 0x80, 0x80, 0x7f, 0xff, 0x9}, 0x8001, 0x5}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000034c0)="902357c31892f272b958130f9c0e5d2196cdc0b8b9c65a248e28c54dc160f96512be590d804cd3d0348c4fe7135f254d1d92ab6c39fc854faed3987330d19fc8f5a73a2ef13aadc77ce89ba611baa0ddf1819b796e4fcfbe42fefe59154200213f5dba54950c22e7940d5c234852cec391decd0607086487", 0x78}, {&(0x7f0000003540)="37568cf439eb29c701574d072b493d9d998f515fa024b3e87d8213d56a8c2a73b5b0400afe3217b7d9e02583db6dae5b8f3324cabbbf4460577c1684bb8929b5771f5f84e00b3b7542a4e35b17d08a4e975df9b6f7a5e04a334515feb5d131a417d4249544e60996737659f241f287e6f1a5c8a44a07d333b1", 0x79}, {&(0x7f00000035c0)="f279", 0x2}, {&(0x7f0000003600)="cf62efe8a1816f063feea2c9c2792117c97c7ffee5bfe9986469bbf8bc5d9be932a4d4c0c77aed1aba6ff78410c56cfbe62ea06fca0bd35bc3f140722be6ddcfb0842c20901eb2a49b05b511be96110f3cc651d08564590fc7b27450d0f349788c3358b040e0ec10de2c0d932e3585e35259fe9e4b6d4b183989", 0x7a}, {&(0x7f0000003680)="1c9bf823e346309407cb50df03408b2048", 0x11}, {&(0x7f00000036c0)="b3bbc115cc72db98f6f52a3fbf55c031197e0d55551a790a6a04ac23db4cceee107bcce77be1fa82373bdeccb78f6aaa42b9fab43c14163ddef1608a36c9c8ba534fd258aa614b045b261f53ce249e419f344f41dc6db562bbfdb26c350344adb82478b38c666ce41b647eb89607ee46ca442cc76ae90042e8c6344f7255a21d3295c30f302f74d9596ab352b9657d19", 0x90}, {&(0x7f0000003780)="dd0313feb00b053a02348c6d3a71fb17dbf6bbf7f06e99f13260ceaccb98aaafc0f7b3677c57af067245af56318a2bdd00ef4252fbe09316ba70293c17c63ee2f3dc2872a1ba242da9e302e586ea54ee7d", 0x51}, {&(0x7f0000003800)="d738519bbcf48246444bbe105da47acc650d596d736004af57483063c23f74044c6453ef5fb8bb4e0d2f7bb1684ffb631545bd7113da66677bd2f6708ff0ce88c8da2846ab21346111ee32ba29a2d07606a51fd0eb29dad7bc79054ad881421b1ea26673b1046e1f54ae8c3bfb20abb9980c866f5df168b4efa04058022a5aefc837258adce0ebb485b7b757906b66469267f7d22d14263a121185037027c16516c6a4505d", 0xa5}, {&(0x7f00000038c0)="01a212a0fe8472d35834713a3da051c377cf49c23127365913afc0d76ba74c6092d0b6e121716a3150e2af8b79185173756fe3b183f4a9f91d7e4a28f84cc07fb82172cd5e6ff582419eaa5590db87f3b896c424a1dd748cdb5db2e08b44cc35895baa1c686b1c5315cfbd616029ef6974e5ba89", 0x74}, {&(0x7f0000003940)="3ebda6808553502fb4338468c18175e40f090176118570c8f8145eff0015c25fc3158a968d655c53f39ad38237507b01adb5d56d567b300587bb0f8d7d2775ba0aff3f8c30ec8721fdba02a99a52a3d2211e5f2d87bbcf40ffd3106fa1086dfb43af8d36c62fb2b199cd6dae96ad1ca36459cde4496529aed9c400849fd37165e87ecd45c489bc7ed17ccb0b3a40843eff4407272f8726cda3c751746b4b60cf772f7e54c408613e9263ab1e8b9f9edd981411612c0d6eebf919b649696e87de4e4db46167228007983db99baa1b6cf4ebe2e4b29a9b4deedeb14de481fd8de4cedcab51fc0ff658a045d5e7a227b5db2497e098b51417b107a78573861223", 0xff}], 0xa, &(0x7f0000003b00)=[@timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003b80)="3e5f6169b0c4c8dff09c183081afacdfbe5340f3dd3d35007d3ab73f706841daddefc10039e821d9e506712a4bfe7749d27a1fea21a2411f1759ac0091f1367945eb656bdac6a81f86714e8c40771d4d2f4ec2d8f103d110896dff49a196192c6b", 0x61}, {&(0x7f0000003c00)="877ca56c3e81138f6a9a8bbfc8f7baad41a3e86b8e9d9d31ed63933b4a8216e4bc82a05da1ab7ad833f6462251548c708bf7196883b6eeb1b670162d33a4", 0x3e}, {&(0x7f0000003c40)="f98ea5d03a9c3e0df82270b1d00ed9d5d4ce71b645878e7c49ba1aa9c3bd0cd2ddd20bb18635109e84c1f080c3eee20670613d024de58f9c60b9d0708e9819ca5e0eefd357b7035c617843d85d6694f77d55b2ef70393a0813a24a2ae6d0186f29c8b5fae096a53f8c825f83b12cc0d9a546097e9af2a90b09a365758377e1d052ca105e2f1b42833d9ecb35870b2a6b563b36a8a368d2533a67eb2e8d033b1b21e0ffc597de0050c1a56afeaeace7e0bed6b121fc", 0xb5}, {&(0x7f0000003d00)="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", 0xfd}, {&(0x7f0000003e00)="f722e4c9", 0x4}, {&(0x7f0000003e40)="aba89ec64d3a2c0484a9e72d86ed222d15d0514421525e6ccce7ce66a2c1ed3517db620f61b4d7248d37b9f4c0ee3f9685651bc640581b5e7bef89a639a35ff62f2fad2a300a5b72adc6c12568f59ae798af97c536f5041db37d9475", 0x5c}, {&(0x7f0000003ec0)="c12ee3c69c6a8644ee9cf27b9adf2be3b08533a64be9dc2cf774de3564b9fd99", 0x20}, {&(0x7f0000003f00)="6e7dc38eb1e9b47d8e7addce65ba315c3d6b46aa08c85e070926c180b0ce31464dc75d9d7392be95b90b6108fa9caaea48", 0x31}, {&(0x7f0000003f40)="df54a5752a55a3c2d263c9576fc631cfbc19b6b41feaf79b4a389aaffb7771995f336259341a76d476f1fda59c4bb9a9fa4191d2781da3b73d059ba480526d1fa49a3da3741f50dbdb78add36897570217ca358757a595f620f102f2b11c6040e3380e270f5db0fdcff37fdfe0b0733c95e2a96ab304edaeeb598b53120bb3c9862a5ef523e882c42a5bb86664e15e1f596c1f205a8755e58a3fb505e1cf27b3de587a1cf96e54b8cd35375f9632e53159aa123c309463a5a9da4a583e08494316045ebe394bf0530e06ac331a5166b767e506d52c7357d665214824f02a4cf5c4595eaa96c23bd36343416d2533", 0xee}], 0x9, &(0x7f0000004100)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x30}}, {{&(0x7f0000004140)=@rc={0x1f, {0x20, 0x8, 0x4, 0x6, 0x3, 0x2}, 0x9}, 0x80, &(0x7f0000004380)=[{&(0x7f00000041c0)="df3d60df26d68d0e8240b7cd8387500f5676b1aa900c2e98f4c89d803e6e6d8aeb64733e6b8c59dc6847e7a3457b5eaae98378e6e1c860dcc17e0244d2330af9a0ba040dc7206eaf771566ecf742839cb8104bb9d79d66a0f641d1a6596cf017efb003acfbcc3a26ee51f77545f38754545f2eac8b47350e55dcd154e8c95d64420523e76d42", 0x86}, {&(0x7f0000004280)="cc2f0953b86202624a7f5b76e5e20589a3b785439d2692e1a2d35550dbc1b6ad689fbc2067a33c17b2fa3a2fea936bc8f95ba98216e2d4907c6516b6cd9551f54f2134a868711f20cfffb7d5bafcf2d9325c28", 0x53}, {&(0x7f0000004300)="e8c4dd941f29be60d2ee2d9947c1ce3bcec92b5c5624816f787db32063abe973098423660ea45a4096e32432104fd1407015591b2f44e107e94bed8761d54ce558187c38315b5f3e75e6bb253af4d02c0244f7c67c3908364424ea30d6829920d4d53e273ab84591b84b88b0d101eceabe188ab2a05700bb1eaaee86", 0x7c}], 0x3, &(0x7f00000043c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xaa44481}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xbb}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xc0}}], 0x9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1369.901522][T26839] memory: usage 307200kB, limit 307200kB, failcnt 6014 [ 1369.948440][T26839] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1369.975824][T26839] Memory cgroup stats for /syz5: [ 1369.975956][T26839] anon 273723392 [ 1369.975956][T26839] file 151552 [ 1369.975956][T26839] kernel_stack 6008832 [ 1369.975956][T26839] slab 10608640 [ 1369.975956][T26839] sock 0 [ 1369.975956][T26839] shmem 65536 [ 1369.975956][T26839] file_mapped 0 [ 1369.975956][T26839] file_dirty 0 [ 1369.975956][T26839] file_writeback 135168 [ 1369.975956][T26839] anon_thp 253755392 [ 1369.975956][T26839] inactive_anon 135168 [ 1369.975956][T26839] active_anon 273723392 [ 1369.975956][T26839] inactive_file 122880 [ 1369.975956][T26839] active_file 45056 [ 1369.975956][T26839] unevictable 0 [ 1369.975956][T26839] slab_reclaimable 1081344 [ 1369.975956][T26839] slab_unreclaimable 9527296 [ 1369.975956][T26839] pgfault 172755 [ 1369.975956][T26839] pgmajfault 0 [ 1369.975956][T26839] workingset_refault 198 [ 1369.975956][T26839] workingset_activate 33 [ 1369.975956][T26839] workingset_nodereclaim 0 [ 1369.975956][T26839] pgrefill 2180 [ 1369.975956][T26839] pgscan 2164 [ 1369.975956][T26839] pgsteal 282 15:19:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x6364, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000054b1a2c0b6843033a21a236686d80f760bbe15b872029dcf1bc0f0a5fdcfee9ae551109702c4c9be7a2799357b7ed893f08bfc1767781bfb5556e7a767e455904cf5bcbdf861", @ANYRES16=r4, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x2008000}, 0x4000001) r5 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x80000001, 0x290880) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f00000003c0)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x770a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1370.318439][T26839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26806,uid=0 [ 1370.443181][T26839] Memory cgroup out of memory: Killed process 26806 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1370.636207][T26849] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1370.646876][T26849] CPU: 1 PID: 26849 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1370.655679][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.665855][T26849] Call Trace: [ 1370.669167][T26849] dump_stack+0x197/0x210 [ 1370.673510][T26849] dump_header+0x10b/0x82d [ 1370.677936][T26849] oom_kill_process.cold+0x10/0x15 [ 1370.683058][T26849] out_of_memory+0x334/0x13c0 [ 1370.687739][T26849] ? find_held_lock+0x35/0x130 [ 1370.692526][T26849] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.698343][T26849] ? oom_killer_disable+0x280/0x280 [ 1370.703630][T26849] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1370.709318][T26849] ? memcg_oom_wake_function+0x700/0x700 [ 1370.715062][T26849] ? do_raw_spin_unlock+0x178/0x270 [ 1370.720395][T26849] ? _raw_spin_unlock+0x28/0x40 [ 1370.725396][T26849] try_charge+0xf76/0x14d0 [ 1370.730126][T26849] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1370.735842][T26849] ? percpu_ref_tryget+0x102/0x230 [ 1370.741149][T26849] ? rcu_read_lock_held+0x9c/0xb0 [ 1370.746310][T26849] ? __kasan_check_read+0x11/0x20 [ 1370.751494][T26849] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1370.757181][T26849] mem_cgroup_try_charge+0x136/0x590 [ 1370.762480][T26849] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1370.768186][T26849] do_huge_pmd_wp_page_fallback+0x24f/0x17f0 [ 1370.774173][T26849] ? perf_trace_lock_acquire+0xf5/0x530 [ 1370.779865][T26849] ? defrag_store+0x360/0x360 [ 1370.784772][T26849] ? lock_downgrade+0x920/0x920 [ 1370.789751][T26849] ? swp_swapcount+0x540/0x540 [ 1370.794521][T26849] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 1370.800422][T26849] ? do_raw_spin_unlock+0x178/0x270 [ 1370.805622][T26849] do_huge_pmd_wp_page+0x803/0x21c0 [ 1370.810834][T26849] ? perf_trace_lock_acquire+0xf5/0x530 [ 1370.810847][T26849] ? __lock_acquire+0x8a0/0x4a00 [ 1370.810868][T26849] ? __split_huge_pmd+0x2e90/0x2e90 [ 1370.810882][T26849] ? __kasan_check_read+0x11/0x20 [ 1370.810895][T26849] ? mark_lock+0xc2/0x1220 [ 1370.810906][T26849] ? find_held_lock+0x35/0x130 [ 1370.810923][T26849] ? __kasan_check_read+0x11/0x20 [ 1370.846189][T26849] ? pmd_val+0x85/0x100 [ 1370.850483][T26849] ? fault_around_bytes_set+0xa0/0xa0 [ 1370.855872][T26849] __handle_mm_fault+0x22e8/0x3da0 [ 1370.860995][T26849] ? vm_iomap_memory+0x1a0/0x1a0 [ 1370.866073][T26849] ? handle_mm_fault+0x292/0xa50 [ 1370.871348][T26849] ? handle_mm_fault+0x7a0/0xa50 [ 1370.876524][T26849] ? __kasan_check_read+0x11/0x20 [ 1370.881798][T26849] handle_mm_fault+0x3b2/0xa50 [ 1370.886826][T26849] __do_page_fault+0x536/0xd80 [ 1370.891894][T26849] do_page_fault+0x38/0x590 [ 1370.896641][T26849] page_fault+0x39/0x40 [ 1370.901022][T26849] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1370.907582][T26849] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1370.927372][T26849] RSP: 0018:ffffc900077f7e68 EFLAGS: 00010202 [ 1370.933643][T26849] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 1370.941803][T26849] RDX: 0000000000000002 RSI: ffff888052cdc000 RDI: 0000000020000940 [ 1370.949977][T26849] RBP: ffffc900077f7ea0 R08: 1ffff1100a59b800 R09: ffffed100a59b801 [ 1370.958164][T26849] R10: ffffed100a59b800 R11: ffff888052cdc001 R12: 0000000020000940 [ 1370.966883][T26849] R13: ffff888052cdc000 R14: 0000000020000942 R15: 00007ffffffff000 [ 1370.975312][T26849] ? _copy_to_user+0x146/0x160 [ 1370.980327][T26849] __x64_sys_mincore+0x3ec/0x890 [ 1370.985573][T26849] do_syscall_64+0xfa/0x790 [ 1370.990343][T26849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1370.996417][T26849] RIP: 0033:0x45a909 [ 1371.000529][T26849] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1371.020668][T26849] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1371.029344][T26849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 1371.037563][T26849] RDX: 0000000020000940 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 1371.045724][T26849] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1371.053874][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1371.062057][T26849] R13: 00000000004c7b36 R14: 00000000004de858 R15: 00000000ffffffff [ 1371.076704][T26849] memory: usage 307200kB, limit 307200kB, failcnt 6041 [ 1371.088398][T26849] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1371.095523][T26849] Memory cgroup stats for /syz5: [ 1371.095653][T26849] anon 271548416 [ 1371.095653][T26849] file 151552 [ 1371.095653][T26849] kernel_stack 6045696 [ 1371.095653][T26849] slab 10608640 [ 1371.095653][T26849] sock 0 [ 1371.095653][T26849] shmem 65536 [ 1371.095653][T26849] file_mapped 0 [ 1371.095653][T26849] file_dirty 0 [ 1371.095653][T26849] file_writeback 135168 [ 1371.095653][T26849] anon_thp 251658240 [ 1371.095653][T26849] inactive_anon 135168 [ 1371.095653][T26849] active_anon 271548416 [ 1371.095653][T26849] inactive_file 122880 [ 1371.095653][T26849] active_file 45056 [ 1371.095653][T26849] unevictable 0 [ 1371.095653][T26849] slab_reclaimable 1081344 [ 1371.095653][T26849] slab_unreclaimable 9527296 [ 1371.095653][T26849] pgfault 172821 [ 1371.095653][T26849] pgmajfault 0 [ 1371.095653][T26849] workingset_refault 198 [ 1371.095653][T26849] workingset_activate 33 [ 1371.095653][T26849] workingset_nodereclaim 0 [ 1371.095653][T26849] pgrefill 2180 [ 1371.095653][T26849] pgscan 2164 [ 1371.095653][T26849] pgsteal 282 [ 1371.199386][T26849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26839,uid=0 [ 1371.215859][T26849] Memory cgroup out of memory: Killed process 26839 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:35736kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 15:19:05 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000002}, 0x0, 0x7, 0x20000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/\x01\x80\x00\x00kvm\x00', 0x210000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0xe740be92ed77516e) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40080, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000180)={0x9, "98e8b55cdb58e67f69495739121b6010292eaad400", 0x3, 0x5, 0x8, 0xc00000, 0x2}) 15:19:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000007c0)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000300)) pipe(0x0) r2 = epoll_create(0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) pipe(0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$int_out(r3, 0x0, 0x0) write$P9_RSTAT(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="adfeffff7d040000004500ff00680000000000200000ed1a1cbcff1d150000202009000000040054c4af1093dd490d00080000000000000d3db26150437349f409317bfefea20000000008"], 0x4b) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15:19:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8904, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:05 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x208000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)='k'}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x3f, 0x9, 0x100, 0x401, 0x401, 0xff, 0x3ff, 0x7, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x4, 0x8, 0x4) [ 1371.398350][ C0] net_ratelimit: 16 callbacks suppressed [ 1371.398357][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x80, 0x5, 0x200, 0x7fff, 0xcf0c, 0x1, 0x9, 0x1ff, 0xc45, 0x2, 0x7ff, 0x7f, 0x0, 0x4, 0x2, 0x8000], 0x1000, 0x30001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x10000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000240)=0x918, &(0x7f0000000280)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x890b, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:05 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280)={0x80, 0x4}, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400283}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe9b2ddaa0ad96117}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8912, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1371.878286][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1371.878322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1371.884083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1371.884189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1371.901362][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8933, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = clone3(&(0x7f0000000400)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), 0x2c, 0x0, &(0x7f0000000200)=""/172, 0xac, &(0x7f00000002c0)=""/244, &(0x7f00000003c0)=[r3, r4, r5, r6, 0xffffffffffffffff, r7], 0x6}, 0x50) kcmp(r2, r8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 15:19:06 executing program 0: syz_genetlink_get_family_id$tipc(0x0) 15:19:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x7ffffffff000}]) io_destroy(r3) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:06 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x3, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8982, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:06 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800800000000}, 0x8, 0x0, 0x800000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x1, 0x80002, 0x4) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000100)) syz_open_dev$admmidi(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="700000009b10199e05000000f2913cb13fd3c3bbf16c9e6ff062cdd203000000000066000000000000000000050000009d00000066642f34000000000400000000000000090000000000000005000000f353000066642f34000000000500000000000000080000000000000005000000603203b2df3e11b82cde2f3bf08ce631b5c1704f03000000eeefefcc8b312b48d33e"], 0x70) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000140)={0x20}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:06 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) accept$inet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={'ip6_vti0\x00', {0x2, 0x4e21, @remote}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0xffffff47) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x2, 0xff, 0x1, 0x6, 0xb120}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 15:19:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0x0, 0x1, 0x2}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8990, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000180), 0x0, &(0x7f000002d000/0x1000)=nil, 0x0) select(0x40, &(0x7f00000001c0)={0x80, 0x4, 0x4, 0x3, 0xca06, 0x1000, 0x0, 0x1}, &(0x7f0000000280)={0xfffffffffffffeff, 0x8000, 0x1ff, 0xffffffffffff00cd, 0x0, 0x5, 0x2}, &(0x7f0000000380)={0x800, 0x7, 0xde84, 0x7, 0xa9f3, 0xb7c, 0x4fb606e1}, &(0x7f00000003c0)={0x0, 0x2710}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x7, 0x1, {0x9, '.:&}/\'!./'}}, 0x12) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000380)}, {&(0x7f00000005c0)="842c625397817160f427593f2daf310a5ee68e4795082b627185943dd47435a1e6dd14bab640d5c99dd8b93c43a3f17f0eaf329577c3ae2d5f1e5fe317db8e7f4c5c322d0200160ba6ca0892c0f221990b9e09f6a048547b45c9f49e671b1ffe46ee56f3db1cb2792e6eadbf75a666ff4c326250b336549b9ba6afce", 0x7c}, {&(0x7f00000006c0)}, {&(0x7f00000008c0)}], 0x4) [ 1373.078295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.084154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.158283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.164178][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8991, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1373.245080][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 15:19:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='\x92\xbd8G/\x00', 0x4480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="f6", 0xfffffffffffffeda}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000140)={0xb, 0xffffffff, 0x1f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xfffc, 0x1, 0x40, 0x7}, {0x7, 0x90, 0x81, 0xffffffff}, {0x1, 0x2, 0x9, 0x101}, {0x2, 0x2, 0xff, 0x3}]}) [ 1373.292999][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 15:19:07 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x40, 0x101, 0x9, 0x10000, 0x4}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)=0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000100)) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) [ 1373.340403][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.378508][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.430308][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 15:19:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x89a2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1373.495352][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.523625][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.557624][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.586960][T27014] kvm [27013]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110 [ 1373.823255][T27032] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1373.915239][T27032] CPU: 1 PID: 27032 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1373.924005][T27032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.934070][T27032] Call Trace: [ 1373.937368][T27032] dump_stack+0x197/0x210 [ 1373.941710][T27032] dump_header+0x10b/0x82d [ 1373.946122][T27032] ? oom_kill_process+0x94/0x420 [ 1373.951051][T27032] oom_kill_process.cold+0x10/0x15 [ 1373.956171][T27032] out_of_memory+0x334/0x13c0 [ 1373.960834][T27032] ? find_held_lock+0x35/0x130 [ 1373.965602][T27032] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.971394][T27032] ? oom_killer_disable+0x280/0x280 [ 1373.976585][T27032] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1373.982124][T27032] ? memcg_oom_wake_function+0x700/0x700 [ 1373.987753][T27032] ? do_raw_spin_unlock+0x178/0x270 [ 1373.993035][T27032] ? _raw_spin_unlock+0x28/0x40 [ 1373.997875][T27032] try_charge+0xf76/0x14d0 [ 1374.002285][T27032] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1374.007829][T27032] ? percpu_ref_tryget+0x102/0x230 [ 1374.012938][T27032] ? rcu_read_lock_held+0x9c/0xb0 [ 1374.017966][T27032] ? __kasan_check_read+0x11/0x20 [ 1374.022993][T27032] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1374.028531][T27032] mem_cgroup_try_charge+0x136/0x590 [ 1374.033803][T27032] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1374.039436][T27032] wp_page_copy+0x407/0x1560 [ 1374.044013][T27032] ? find_held_lock+0x35/0x130 [ 1374.048763][T27032] ? follow_pfn+0x2a0/0x2a0 [ 1374.053275][T27032] ? lock_downgrade+0x920/0x920 [ 1374.058117][T27032] ? swp_swapcount+0x540/0x540 [ 1374.062884][T27032] ? do_raw_spin_unlock+0x178/0x270 [ 1374.068067][T27032] do_wp_page+0x543/0x1540 [ 1374.072483][T27032] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1374.077844][T27032] __handle_mm_fault+0x327b/0x3da0 [ 1374.082945][T27032] ? vm_iomap_memory+0x1a0/0x1a0 [ 1374.087880][T27032] ? handle_mm_fault+0x292/0xa50 [ 1374.092808][T27032] ? handle_mm_fault+0x7a0/0xa50 [ 1374.097732][T27032] ? __kasan_check_read+0x11/0x20 [ 1374.102745][T27032] handle_mm_fault+0x3b2/0xa50 [ 1374.107499][T27032] __do_page_fault+0x536/0xd80 [ 1374.112252][T27032] do_page_fault+0x38/0x590 [ 1374.116759][T27032] page_fault+0x39/0x40 [ 1374.120899][T27032] RIP: 0033:0x4121d0 [ 1374.124781][T27032] Code: ff ff 48 83 c8 01 48 89 05 dd 04 66 00 48 8b 05 d6 7c 30 00 49 c7 85 c8 02 00 00 90 9e 71 00 49 89 85 c0 02 00 00 4c 89 70 08 <4c> 89 35 b9 7c 30 00 48 c7 05 ae 04 66 00 00 00 00 00 f0 ff 0d af [ 1374.144386][T27032] RSP: 002b:0000000000a6fb10 EFLAGS: 00010202 [ 1374.150561][T27032] RAX: 00007f4c4048d9c0 RBX: 0000000000020000 RCX: 00000000ffffffe0 [ 1374.158529][T27032] RDX: 0000000000000040 RSI: 0000000000000001 RDI: 00007f4c4046c6a0 15:19:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/d\x03v/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x141a01) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x4da, 0x40, 0x0, 0x0, 0x3, 0x1f, 0x3, 0x4, 0xfffff21c, 0xfffffffc, 0x19, 0x3, 0x2, 0x20, 0xa4f1a8a98bbbc1db, 0x8}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000002c0)={0x2, 'veth1_to_team\x00', {0x7ff}, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) 15:19:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x1ac}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000500)={r2, 0xec7b}, &(0x7f0000000540)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0xd000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$vhci(r1, &(0x7f0000000100)=@HCI_EVENT_PKT={0x4, "08a853f2bfa25c58be106545213655a3579cc85db2e54363"}, 0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x89e2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:08 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xf, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1374.166498][T27032] RBP: 0000000000a6fbf0 R08: 000000000071b800 R09: 000000000071b800 [ 1374.174476][T27032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fce0 [ 1374.182441][T27032] R13: 00007f4c4046c700 R14: 00007f4c4046c9c0 R15: 000000000075bfd4 [ 1374.292887][T27032] memory: usage 307200kB, limit 307200kB, failcnt 6122 [ 1374.335356][T27032] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1374.347288][T27032] Memory cgroup stats for /syz5: [ 1374.347405][T27032] anon 272355328 [ 1374.347405][T27032] file 151552 [ 1374.347405][T27032] kernel_stack 6230016 [ 1374.347405][T27032] slab 10883072 [ 1374.347405][T27032] sock 0 [ 1374.347405][T27032] shmem 65536 [ 1374.347405][T27032] file_mapped 0 [ 1374.347405][T27032] file_dirty 0 [ 1374.347405][T27032] file_writeback 135168 [ 1374.347405][T27032] anon_thp 251658240 [ 1374.347405][T27032] inactive_anon 135168 [ 1374.347405][T27032] active_anon 272359424 [ 1374.347405][T27032] inactive_file 122880 [ 1374.347405][T27032] active_file 45056 [ 1374.347405][T27032] unevictable 0 [ 1374.347405][T27032] slab_reclaimable 1081344 [ 1374.347405][T27032] slab_unreclaimable 9801728 [ 1374.347405][T27032] pgfault 173217 [ 1374.347405][T27032] pgmajfault 0 [ 1374.347405][T27032] workingset_refault 198 [ 1374.347405][T27032] workingset_activate 33 [ 1374.347405][T27032] workingset_nodereclaim 0 15:19:08 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) fallocate(r0, 0x14, 0x0, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x470002, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1e) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) 15:19:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x89f1, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0xd, 0x6}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "f2c1159bf13259022e59e0ba09bbc9fc"}, 0x11, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000001c0)=""/27) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1374.347405][T27032] pgrefill 2180 [ 1374.347405][T27032] pgscan 2164 [ 1374.347405][T27032] pgsteal 282 15:19:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9204, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10b81, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x1000, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xe709423884859eee) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)="6b63a898d612b5223b6724db37ce6c27385bedd0a38241e5e4a3738ce7587cce7d549c1f6b74a1bd08101b7b74ef101c0402ef6593e95875ca680ff0bfaced778939eafbe453ce516874aa9288f627ff82b851cae69e28ceef9bf0fec8625414a01e51524e19e9911f631bc93c4975aed74b8efcfd9182422f667841991dd3c19896e9c2b8b4f2edaa1cdcad38d5026f9af42face5f19b46942ff7ce367ed44883a91a47291a2660659ccb", 0xab}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x20, @mcast2, 0x5}, @in6={0xa, 0x4e23, 0xffff, @empty, 0xfd}, @in6={0xa, 0x4e22, 0x8, @empty, 0x73}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x9, @remote, 0x80000001}], 0xa0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) semget$private(0x0, 0x7, 0xe0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$rfkill(r1, &(0x7f0000000340), 0x8) [ 1374.808916][T27032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26892,uid=0 [ 1374.852281][T27032] Memory cgroup out of memory: Killed process 26892 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:09 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x8e, 0x1, 0x5, "3c0940d8e28f31861c6a98f4edfc1a81", "2ec72938fb75d1e3acbae3afc757b58eea6b03420cd6fc29d2f62e927e9a965c73215dfe60f9ccfae668ab2d54d21832bdd9dc4ec7de6eda10d60031b854f390e23e71a804f57319126f112c473fc390dec2c7e27ed7966a49eeb78d8c9f23b8faa5292aff7aa8230420d8743be52b4d53e3422c4c9d3908f8"}, 0x8e, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r6, 0x100}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 1375.057863][T27050] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1375.188399][T27050] CPU: 1 PID: 27050 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1375.198784][T27050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.209894][T27050] Call Trace: [ 1375.209921][T27050] dump_stack+0x197/0x210 [ 1375.217556][T27050] dump_header+0x10b/0x82d [ 1375.217570][T27050] ? oom_kill_process+0x94/0x420 [ 1375.217584][T27050] oom_kill_process.cold+0x10/0x15 [ 1375.217605][T27050] out_of_memory+0x334/0x13c0 [ 1375.237985][T27050] ? oom_killer_disable+0x280/0x280 [ 1375.245337][T27050] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1375.251983][T27050] ? memcg_oom_wake_function+0x700/0x700 [ 1375.259522][T27050] ? do_raw_spin_unlock+0x178/0x270 [ 1375.264732][T27050] ? _raw_spin_unlock+0x28/0x40 [ 1375.269595][T27050] try_charge+0xa54/0x14d0 [ 1375.274017][T27050] ? find_held_lock+0x35/0x130 [ 1375.279848][T27050] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1375.285419][T27050] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1375.285436][T27050] ? find_held_lock+0x35/0x130 [ 1375.285452][T27050] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1375.285476][T27050] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1375.311395][T27050] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1375.317285][T27050] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1375.317304][T27050] __memcg_kmem_charge+0x13a/0x3a0 [ 1375.317323][T27050] __alloc_pages_nodemask+0x4f5/0x910 [ 1375.334741][T27050] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1375.340488][T27050] ? mark_lock+0xc2/0x1220 [ 1375.340503][T27050] ? __lock_acquire+0x8a0/0x4a00 [ 1375.340521][T27050] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1375.340539][T27050] alloc_pages_current+0x107/0x210 [ 1375.349863][T27050] pte_alloc_one+0x1b/0x1a0 [ 1375.349884][T27050] __handle_mm_fault+0x2e6b/0x3da0 [ 1375.349905][T27050] ? vm_iomap_memory+0x1a0/0x1a0 [ 1375.349920][T27050] ? handle_mm_fault+0x292/0xa50 [ 1375.349949][T27050] ? handle_mm_fault+0x7a0/0xa50 [ 1375.349968][T27050] ? __kasan_check_read+0x11/0x20 [ 1375.390688][T27050] handle_mm_fault+0x3b2/0xa50 [ 1375.395464][T27050] __do_page_fault+0x536/0xd80 [ 1375.400216][T27050] ? page_fault+0x16/0x40 [ 1375.404539][T27050] do_page_fault+0x38/0x590 [ 1375.409028][T27050] page_fault+0x39/0x40 [ 1375.413167][T27050] RIP: 0033:0x45a909 [ 1375.417051][T27050] Code: Bad RIP value. [ 1375.421099][T27050] RSP: 002b:00007f4c4048cc78 EFLAGS: 00010246 [ 1375.427147][T27050] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000045a909 [ 1375.435116][T27050] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.443069][T27050] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1375.451037][T27050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1375.458990][T27050] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1375.505077][T27050] memory: usage 304880kB, limit 307200kB, failcnt 6122 [ 1375.513408][T27050] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.520375][T27050] Memory cgroup stats for /syz5: [ 1375.520486][T27050] anon 270225408 [ 1375.520486][T27050] file 151552 [ 1375.520486][T27050] kernel_stack 6230016 [ 1375.520486][T27050] slab 10883072 [ 1375.520486][T27050] sock 0 [ 1375.520486][T27050] shmem 65536 [ 1375.520486][T27050] file_mapped 0 [ 1375.520486][T27050] file_dirty 0 [ 1375.520486][T27050] file_writeback 135168 [ 1375.520486][T27050] anon_thp 249561088 [ 1375.520486][T27050] inactive_anon 135168 [ 1375.520486][T27050] active_anon 270229504 [ 1375.520486][T27050] inactive_file 122880 [ 1375.520486][T27050] active_file 45056 [ 1375.520486][T27050] unevictable 0 [ 1375.520486][T27050] slab_reclaimable 1081344 [ 1375.520486][T27050] slab_unreclaimable 9801728 [ 1375.520486][T27050] pgfault 173217 [ 1375.520486][T27050] pgmajfault 0 [ 1375.520486][T27050] workingset_refault 198 [ 1375.520486][T27050] workingset_activate 33 [ 1375.520486][T27050] workingset_nodereclaim 0 [ 1375.520486][T27050] pgrefill 2180 [ 1375.520486][T27050] pgscan 2164 [ 1375.520486][T27050] pgsteal 282 [ 1375.520502][T27050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26734,uid=0 [ 1375.615794][T27050] Memory cgroup out of memory: Killed process 26734 (syz-executor.5) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1375.645651][T27034] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1375.668757][T27034] CPU: 1 PID: 27034 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1375.677452][T27034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.687490][T27034] Call Trace: [ 1375.690776][T27034] dump_stack+0x197/0x210 [ 1375.695113][T27034] dump_header+0x10b/0x82d [ 1375.699537][T27034] oom_kill_process.cold+0x10/0x15 [ 1375.704642][T27034] out_of_memory+0x334/0x13c0 [ 1375.709321][T27034] ? oom_killer_disable+0x280/0x280 [ 1375.714534][T27034] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1375.720153][T27034] ? memcg_oom_wake_function+0x700/0x700 [ 1375.725800][T27034] ? do_raw_spin_unlock+0x178/0x270 [ 1375.731015][T27034] ? _raw_spin_unlock+0x28/0x40 [ 1375.735867][T27034] try_charge+0xa54/0x14d0 [ 1375.740297][T27034] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1375.745851][T27034] ? percpu_ref_tryget+0x102/0x230 [ 1375.750961][T27034] ? rcu_read_lock_held+0x9c/0xb0 [ 1375.755978][T27034] ? __kasan_check_read+0x11/0x20 [ 1375.760990][T27034] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1375.766518][T27034] mem_cgroup_try_charge+0x136/0x590 [ 1375.771811][T27034] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1375.777441][T27034] wp_page_copy+0x407/0x1560 [ 1375.782015][T27034] ? find_held_lock+0x35/0x130 [ 1375.786764][T27034] ? follow_pfn+0x2a0/0x2a0 [ 1375.791266][T27034] ? lock_downgrade+0x920/0x920 [ 1375.796121][T27034] ? do_raw_spin_unlock+0x178/0x270 [ 1375.801415][T27034] do_wp_page+0x543/0x1540 [ 1375.805822][T27034] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1375.811200][T27034] __handle_mm_fault+0x327b/0x3da0 [ 1375.816309][T27034] ? vm_iomap_memory+0x1a0/0x1a0 [ 1375.821229][T27034] ? handle_mm_fault+0x292/0xa50 [ 1375.826155][T27034] ? handle_mm_fault+0x297/0xa50 [ 1375.831090][T27034] ? __rcu_read_unlock+0x1f/0x710 [ 1375.836117][T27034] handle_mm_fault+0x3b2/0xa50 [ 1375.840870][T27034] __do_page_fault+0x536/0xd80 [ 1375.845631][T27034] do_page_fault+0x38/0x590 [ 1375.850137][T27034] page_fault+0x39/0x40 [ 1375.854377][T27034] RIP: 0033:0x40437e [ 1375.858296][T27034] Code: 92 02 00 00 80 3d f9 e2 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 e6 e2 66 00 39 45 24 0f 84 e1 01 00 00 44 8b a5 80 00 00 00 fd e2 ff ff 48 2b 05 86 3c 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 1375.877909][T27034] RSP: 002b:00007f4c4048cc90 EFLAGS: 00010246 [ 1375.883969][T27034] RAX: 00007f4c4248e000 RBX: 0000000000001b8c RCX: 000000000045a909 [ 1375.891934][T27034] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.899921][T27034] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1375.907956][T27034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.915927][T27034] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1375.936482][T27034] memory: usage 302700kB, limit 307200kB, failcnt 6122 [ 1375.945770][T27034] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.954356][T27034] Memory cgroup stats for /syz5: [ 1375.969823][T27034] anon 268042240 [ 1375.969823][T27034] file 151552 [ 1375.969823][T27034] kernel_stack 6230016 [ 1375.969823][T27034] slab 10883072 [ 1375.969823][T27034] sock 0 [ 1375.969823][T27034] shmem 65536 [ 1375.969823][T27034] file_mapped 0 [ 1375.969823][T27034] file_dirty 0 [ 1375.969823][T27034] file_writeback 135168 [ 1375.969823][T27034] anon_thp 247463936 [ 1375.969823][T27034] inactive_anon 135168 [ 1375.969823][T27034] active_anon 268042240 [ 1375.969823][T27034] inactive_file 122880 [ 1375.969823][T27034] active_file 45056 [ 1375.969823][T27034] unevictable 0 [ 1375.969823][T27034] slab_reclaimable 1081344 [ 1375.969823][T27034] slab_unreclaimable 9801728 [ 1375.969823][T27034] pgfault 173217 [ 1375.969823][T27034] pgmajfault 0 [ 1375.969823][T27034] workingset_refault 198 [ 1375.969823][T27034] workingset_activate 33 [ 1375.969823][T27034] workingset_nodereclaim 0 [ 1375.969823][T27034] pgrefill 2180 [ 1375.969823][T27034] pgscan 2164 [ 1375.969823][T27034] pgsteal 282 [ 1376.095129][T27034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20493,uid=0 [ 1376.112064][T27034] Memory cgroup out of memory: Killed process 20493 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1376.137046][ T1118] oom_reaper: reaped process 20493 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 15:19:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x800, 0x4) 15:19:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae01, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:10 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x48, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:10 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) connect$inet6(r1, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1e) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) 15:19:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0xf000, &(0x7f0000000200), 0x20ba80305facfc41, r3, 0x8}) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001040), 0x0, 0x0, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x200000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000240)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) r8 = fcntl$dupfd(r6, 0x406, r0) ioctl$DRM_IOCTL_SET_UNIQUE(r8, 0x40106410, &(0x7f0000000000)={0x93, &(0x7f0000000100)="c0e753f6e5d94b462ef834938a88977619318fd198de5f78f53ce9f73c1655026629183f68517265c2819238e1ed4bae9652e94a2a740ab4328bc947c27a044c96c428ebe1c57544db386514cce3ed1253b6bd49810c983b119885bc9f87fa84b1f60144b1485d267bb743a72add0f3e0697cf58b46aef05b6aab22e3bbfcb0afc62f1ab0718fd5f616d4116d026e03627412d"}) 15:19:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x88) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) creat(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x1) epoll_create(0x0) epoll_create(0x0) epoll_create(0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) io_destroy(0x0) listen(0xffffffffffffffff, 0x0) 15:19:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae41, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:10 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') 15:19:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xcffa808b513f9ded, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) syz_open_procfs(0x0, &(0x7f0000000280)='io\x00') getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffe, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000200)=0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 15:19:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae60, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x602243) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:10 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 15:19:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae80, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x6b, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 15:19:11 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000003, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000300)="1e4a0c7f", 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffd3e, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1377.238310][ C1] net_ratelimit: 18 callbacks suppressed [ 1377.238318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.249896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.318371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.324284][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x2, 0x1, 0x3f, 0x6, 0xff, 0x0, 0x4, 0xd637, 0x7, 0x5, 0x8000, 0x8, 0xfffffffffffffff9, 0x8, 0x2], 0x1000, 0x8300}) 15:19:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae9a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4b4, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x800000, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) 15:19:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000020, &(0x7f00000001c0)='proc\x00') 15:19:11 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x213e37df, "129f48510b66fecae9f91fe92b15fe35f36c470d9774e928a44de5efd673acd1", 0x400, 0x0, 0x3, 0xb, 0x2}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) r4 = getpid() sched_setscheduler(r4, 0x7, &(0x7f0000000180)) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1377.571750][T27218] proc: Unknown parameter 'proc' [ 1377.638386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.655859][T27226] proc: Unknown parameter 'proc' 15:19:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0xc0000102]}) 15:19:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea3, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x440500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1378.119577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.125924][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x1, &(0x7f0000000000)) 15:19:12 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000004, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1378.278422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.284277][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.290205][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:19:12 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xc1ef, 0x202180) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000180)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x3, 0x4, &(0x7f00000001c0)=0x4}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0xfffffe35, r2}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaead, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:12 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040), 0x4) mknod$loop(0x0, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x601c}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x1b6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) getpid() r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r4) ptrace$setregs(0xd, r4, 0x69, &(0x7f00000000c0)) [ 1378.599681][T27279] ptrace attach of "/root/syz-executor.1"[8787] was attempted by "/root/syz-executor.1"[27279] [ 1378.709596][T27285] ptrace attach of "/root/syz-executor.1"[8787] was attempted by "/root/syz-executor.1"[27285] 15:19:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaeb7, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:13 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x55, 0x93, 0x649f, {0x2, 0x20}, {0x8, 0x3}, @ramp={0x7, 0x8, {0x4, 0x4, 0x949, 0xe50}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x7ff, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:13 executing program 0: r0 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) creat(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4b4, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x800000, 0x6}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/wireless\x00') ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000140)) 15:19:13 executing program 1: getpgid(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4b4, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x800000, 0x6}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 15:19:13 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) restart_syscall() fcntl$setlease(r0, 0x400, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1379.315217][T27300] debugfs: File 'dropped' in directory 'loop4' already present! [ 1379.349837][T27300] debugfs: File 'msg' in directory 'loop4' already present! 15:19:13 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000005, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x400442c8, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x400454ca, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c", @ANYRES32=r5, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f0000000000000004000000020000040000422dbdf400f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040022000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000000d9c3ffffee0000000100000000000000001000006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f0000100005001f02df00e5b9fb0007000000100003001f00030007000000010100001800010005010400090000000400000001040000000000000152d50f6365daeb9c99d09b44785c38ea0d1bcf51e44751de5a729eb37c5c10ce8b3da395baebea9fcdcba6a096515f9de8bb86fa5639e5abc7e282c2d89d6f019fe17ba6806fce8d21e78e20320e2bda8991ecfd0f06dbabd031b574b18d39c91514e2a8e10c11c133f37f713cc7ba213f0b431efd846bf8c97994e0809e66d6856cd0ffa6b821fae98fcc8c0f5f829312d5f6053f844fac4070e23dbc54361d6e1c3fca4dff868987651fe102a3079500129cf4f33b5f993e235d198f7a08967342bbd69384f9a0de7dac23efc25f4276516e09ab16ec84f1f2"], 0x8d0}}, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000", @ANYRES32=r9, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c", @ANYRES32=r10, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1122950}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=@getsa={0x478, 0x12, 0x120, 0x70bd2c, 0x25dfdbfe, {@in=@empty, 0x4d3, 0x0, 0x6c}, [@tmpl={0x244, 0x5, [{{@in=@remote, 0x4d2}, 0x2, @in=@rand_addr=0x1, 0x3507, 0x4, 0x1, 0x4, 0x6, 0x2}, {{@in6=@local, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x0, 0x0, 0x1, 0x81, 0x7, 0xc8, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x2b}, 0x0, @in=@empty, 0xffc00000, 0x0, 0x1, 0x55, 0x5, 0x6, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x0, 0x9, 0x7f, 0x6, 0xff}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x3, 0x3, 0x4, 0x6, 0xec}, {{@in6=@empty, 0x4d3, 0x33}, 0x8, @in6=@local, 0x3507, 0x3, 0x0, 0x2, 0x800, 0x26, 0x7}, {{@in6=@loopback, 0x4d5, 0x8a}, 0x0, @in=@local, 0x3507, 0x0, 0x2, 0x0, 0x800, 0x2, 0x4}, {{@in6=@rand_addr="ef575d031aad081237d6204c0c655b0f", 0x4d4, 0x6c}, 0xa, @in=@local, 0x3500, 0x1, 0x0, 0x5, 0xd8, 0x6, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d5}, 0x8, @in=@multicast2, 0x3505, 0x2, 0x3, 0x9, 0x0, 0x80000001, 0x3}]}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd29, 0x1000}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0x6, 0x2, 0x80, 0x120, 0x0, 0x0, r4}, {0x200, 0x32c8, 0x4, 0x0, 0xbd, 0xcd, 0x8, 0xfff}, {0x7, 0x20, 0x8, 0x1}, 0x8000, 0x6e6bbb, 0x0, 0x0, 0x2, 0x3}}, @algo_crypt={0xa4, 0x2, {{'fpu(pcbc(aes-aesni))\x00'}, 0x2d8, "31920334750d5be9d60590c019e05636082daa3748a494daf22d79313a909c0ea6a1d52beba60d0db9b1b83bf3067dfb9593a7f1317cfe6a2a6933f21398adfdd0a26f614e1f884d63eaf0274e3fe7b05af19afb795e86c5e50e7e"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@rand_addr="e1c8a4b87cf5f9cb9b2634cb5e05c705", 0x4e20, 0x4, 0x4e20, 0x6, 0x3, 0x1a0, 0x0, 0x2c, r7, r9}, {0xb0c1, 0x100, 0xfffffffffffffffb, 0x4, 0xdf8, 0x2, 0x2, 0x91}, {0x5, 0x3d63, 0x100, 0xea}, 0x7, 0x6e6bb3, 0x0, 0x0, 0x2, 0x1}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10040}, 0x4000) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x402001, 0x0) ioctl$CAPI_NCCI_GETUNIT(r12, 0x80044327, &(0x7f0000000180)=0x4) 15:19:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40045613, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1379.957025][T27300] debugfs: File 'trace0' in directory 'loop4' already present! 15:19:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/kvm\x00', 0x0) keyctl$get_keyring_id(0x0, r2, 0x3f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40049409, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1380.348499][T27306] debugfs: File 'dropped' in directory 'loop4' already present! [ 1380.356227][T27306] debugfs: File 'msg' in directory 'loop4' already present! 15:19:14 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000006, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1380.726982][T27306] debugfs: File 'trace0' in directory 'loop4' already present! [ 1381.068089][T27313] debugfs: File 'dropped' in directory 'loop4' already present! [ 1381.079623][T27313] debugfs: File 'msg' in directory 'loop4' already present! [ 1381.179876][T27313] debugfs: File 'trace0' in directory 'loop4' already present! 15:19:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x9e]}) 15:19:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200000, 0x0) read$usbfs(r2, &(0x7f0000000200)=""/241, 0xf1) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000180)={0x800, &(0x7f0000000100)="050e4c963271de54"}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:15 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) inotify_init1(0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xc, 0x7fffffff, 0xffffff7f}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0xfdaf) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)={0x3f, 0x47a1, 0x2, 0x0, 0x0, [{r5}, {r0}]}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0xc001001b]}) 15:19:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0xc0000081]}) 15:19:15 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000007, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) times(&(0x7f00000000c0)) 15:19:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8040ae9f, &(0x7f0000000200)={0x0, 0x8b}) 15:19:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xff, 0x6, 0x3, "7d25af926ca391532f5fd8bd00c05fb4", "78e19c643063649b5f56c1b56cb562ab9560df348603be3a0e924d5c41bec499ee1e59e76c20b0e3294a192ef1a56ef06f19dd0f8e4250155c86b4189a30d67a62379cb27d03087f149fb1af6120a80b7f9dffb067866067314d1c1145f7a6739b6880edd186d4d2e771b0cf9dc58c5b4a71ac30d670a28a1bf917902f2ca62f1759751f5e06b443fce51a1531a876dff32534d08bf87c2cccb5dd89663f2390c60dba69019e8416f9c61355b5eb3775adbdf288615e2c066503ba3b07b881763f971a5defd9d50633d7542d87d5765ee5e98a98fb288c505847995f0611e863a4edca8265c4fabd2525"}, 0xff, 0xb74b0a67148f276c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:19:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae99, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x5, 0xe009, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) [ 1382.288290][ C0] net_ratelimit: 17 callbacks suppressed [ 1382.288299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.299941][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:16 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x387, 0x4000) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008550c, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x18, 0x0, 0x10) 15:19:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 15:19:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000100)={0x5, 0x1, 0x7, @dev={[], 0xb}, 'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1382.438316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.444180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.450093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.455881][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:16 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000008, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, 0x0, 0x0) 15:19:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1600bd7a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000005c0)}, {&(0x7f00000008c0)}], 0x2) 15:19:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:16 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) write$P9_RLERRORu(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1401200007000007002565317d7604a53a12a2f5022362c65634f9734c9cb73f0000008b63af7ae77eb6"], 0x2a) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, [], [{0x7, 0x3, 0x7, 0x5, 0x28}, {0x8, 0x5, 0x0, 0x98, 0xec}], [[], [], [], [], [], [], []]}) keyctl$read(0xb, 0x0, &(0x7f0000019600)=""/102388, 0x18ff4) keyctl$setperm(0x5, 0x0, 0x5100000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='.keyring{ppp0)systemselinuxselinux}cpuset\x11vmnet0\x00'}, 0x10) ftruncate(r4, 0xfffffffffffffffe) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0xfffffffffffffecc, r9, 0x100, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000128}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r9, 0x3b1c1b996e06e468, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4f0}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc2ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x94, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 15:19:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae8a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, 0x10) [ 1383.306759][T27479] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1383.319776][T27479] CPU: 0 PID: 27479 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1383.328569][T27479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.338745][T27479] Call Trace: [ 1383.342044][T27479] dump_stack+0x197/0x210 [ 1383.346367][T27479] dump_header+0x10b/0x82d [ 1383.350790][T27479] oom_kill_process.cold+0x10/0x15 [ 1383.355902][T27479] out_of_memory+0x334/0x13c0 [ 1383.360572][T27479] ? find_held_lock+0x35/0x130 [ 1383.365348][T27479] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1383.371138][T27479] ? oom_killer_disable+0x280/0x280 [ 1383.376342][T27479] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1383.381891][T27479] ? memcg_oom_wake_function+0x700/0x700 [ 1383.387574][T27479] ? do_raw_spin_unlock+0x178/0x270 [ 1383.392756][T27479] ? _raw_spin_unlock+0x28/0x40 [ 1383.397599][T27479] try_charge+0xf76/0x14d0 [ 1383.402014][T27479] ? find_held_lock+0x35/0x130 [ 1383.406835][T27479] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1383.412364][T27479] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1383.417943][T27479] ? find_held_lock+0x35/0x130 [ 1383.422704][T27479] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1383.428260][T27479] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1383.433813][T27479] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1383.439180][T27479] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1383.444727][T27479] __memcg_kmem_charge+0x13a/0x3a0 [ 1383.449848][T27479] __alloc_pages_nodemask+0x4f5/0x910 [ 1383.455217][T27479] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1383.460930][T27479] ? copy_page_range+0x10b2/0x20b0 [ 1383.466039][T27479] ? copy_page_range+0x10b2/0x20b0 [ 1383.471204][T27479] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1383.477431][T27479] alloc_pages_current+0x107/0x210 [ 1383.478302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.482535][T27479] pte_alloc_one+0x1b/0x1a0 [ 1383.488314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.492724][T27479] __pte_alloc+0x20/0x310 [ 1383.502739][T27479] copy_page_range+0x1616/0x20b0 [ 1383.507684][T27479] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1383.513216][T27479] ? __rb_insert_augmented+0x20c/0xd90 [ 1383.518669][T27479] ? validate_mm_rb+0xa3/0xc0 [ 1383.523352][T27479] ? __vma_link_rb+0x5ad/0x770 [ 1383.528118][T27479] dup_mm+0xa67/0x1430 [ 1383.532254][T27479] ? vm_area_dup+0x170/0x170 [ 1383.536825][T27479] ? debug_mutex_init+0x2d/0x60 [ 1383.541674][T27479] copy_process+0x2ad6/0x7230 [ 1383.546359][T27479] ? __kasan_check_read+0x11/0x20 [ 1383.551408][T27479] ? mark_lock+0xc2/0x1220 [ 1383.555814][T27479] ? __cleanup_sighand+0xc0/0xc0 [ 1383.560742][T27479] ? __might_fault+0x12b/0x1e0 [ 1383.565506][T27479] ? __might_fault+0x12b/0x1e0 [ 1383.570265][T27479] _do_fork+0x146/0x1090 [ 1383.574507][T27479] ? copy_init_mm+0x20/0x20 [ 1383.579011][T27479] ? __kasan_check_read+0x11/0x20 [ 1383.584035][T27479] ? _copy_to_user+0x118/0x160 [ 1383.588795][T27479] __x64_sys_clone+0x19a/0x260 [ 1383.593535][T27479] ? __ia32_sys_vfork+0xd0/0xd0 [ 1383.598393][T27479] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1383.603677][T27479] ? trace_hardirqs_on+0x67/0x240 [ 1383.608691][T27479] do_syscall_64+0xfa/0x790 [ 1383.613179][T27479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1383.619144][T27479] RIP: 0033:0x45a909 [ 1383.623039][T27479] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1383.642641][T27479] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1383.651062][T27479] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1383.659020][T27479] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1383.666997][T27479] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1383.674951][T27479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1383.682909][T27479] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1383.692399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.698441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.707438][T27479] memory: usage 307200kB, limit 307200kB, failcnt 6141 [ 1383.714621][T27479] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1383.721851][T27479] Memory cgroup stats for /syz5: [ 1383.722637][T27479] anon 270868480 [ 1383.722637][T27479] file 151552 [ 1383.722637][T27479] kernel_stack 6451200 [ 1383.722637][T27479] slab 11288576 [ 1383.722637][T27479] sock 0 [ 1383.722637][T27479] shmem 65536 [ 1383.722637][T27479] file_mapped 0 [ 1383.722637][T27479] file_dirty 0 [ 1383.722637][T27479] file_writeback 135168 [ 1383.722637][T27479] anon_thp 247463936 [ 1383.722637][T27479] inactive_anon 135168 [ 1383.722637][T27479] active_anon 270868480 [ 1383.722637][T27479] inactive_file 122880 [ 1383.722637][T27479] active_file 45056 [ 1383.722637][T27479] unevictable 0 [ 1383.722637][T27479] slab_reclaimable 1081344 [ 1383.722637][T27479] slab_unreclaimable 10207232 [ 1383.722637][T27479] pgfault 173877 [ 1383.722637][T27479] pgmajfault 0 [ 1383.722637][T27479] workingset_refault 198 [ 1383.722637][T27479] workingset_activate 33 [ 1383.722637][T27479] workingset_nodereclaim 0 [ 1383.722637][T27479] pgrefill 2180 [ 1383.722637][T27479] pgscan 2164 [ 1383.722637][T27479] pgsteal 282 [ 1383.819431][T27479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27209,uid=0 [ 1383.840806][T27479] Memory cgroup out of memory: Killed process 27209 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) 15:19:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k'}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x953d, 0x194003) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x0, r4}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) fcntl$setown(r2, 0x8, r5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x3}}, 0x226, 0x1, 0x8, 0x800, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000200)={r9, 0x49}, &(0x7f0000000340)=0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:19:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae90, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:18 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2a) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:18 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000009, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1384.067132][T27529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:19:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x31, 0x0, 0x10) [ 1384.295258][T27543] bond0: (slave bond_slave_1): Releasing backup interface 15:19:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1384.623304][T27546] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1384.665701][T27546] CPU: 0 PID: 27546 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1384.674442][T27546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.684504][T27546] Call Trace: [ 1384.687815][T27546] dump_stack+0x197/0x210 [ 1384.692157][T27546] dump_header+0x10b/0x82d [ 1384.696588][T27546] oom_kill_process.cold+0x10/0x15 [ 1384.701720][T27546] out_of_memory+0x334/0x13c0 [ 1384.706403][T27546] ? find_held_lock+0x35/0x130 [ 1384.711180][T27546] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1384.716997][T27546] ? oom_killer_disable+0x280/0x280 [ 1384.722217][T27546] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1384.727773][T27546] ? memcg_oom_wake_function+0x700/0x700 [ 1384.733425][T27546] ? do_raw_spin_unlock+0x178/0x270 [ 1384.738636][T27546] ? _raw_spin_unlock+0x28/0x40 [ 1384.743497][T27546] try_charge+0xf76/0x14d0 [ 1384.747923][T27546] ? swapgs_restore_regs_and_return_to_usermode+0x3b/0x40 [ 1384.755039][T27546] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1384.765976][T27546] ? lock_release+0x4c0/0x960 [ 1384.770673][T27546] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1384.776222][T27546] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1384.781604][T27546] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1384.787162][T27546] __memcg_kmem_charge+0x13a/0x3a0 [ 1384.792295][T27546] __alloc_pages_nodemask+0x4f5/0x910 [ 1384.797678][T27546] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1384.803519][T27546] ? retint_kernel+0x2b/0x2b [ 1384.808120][T27546] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1384.814364][T27546] alloc_pages_current+0x107/0x210 [ 1384.819474][T27546] pte_alloc_one+0x1b/0x1a0 [ 1384.823972][T27546] __pte_alloc+0x20/0x310 [ 1384.828290][T27546] copy_page_range+0x1616/0x20b0 [ 1384.833238][T27546] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1384.838779][T27546] ? validate_mm_rb+0xa3/0xc0 [ 1384.843451][T27546] ? __vma_link_rb+0x5ad/0x770 [ 1384.848219][T27546] ? anon_vma_fork+0xd4/0x4a0 [ 1384.852902][T27546] dup_mm+0xa67/0x1430 [ 1384.856979][T27546] ? vm_area_dup+0x170/0x170 [ 1384.861564][T27546] copy_process+0x2ad6/0x7230 [ 1384.866223][T27546] ? __kasan_check_read+0x11/0x20 [ 1384.871239][T27546] ? mark_lock+0xc2/0x1220 [ 1384.875652][T27546] ? __cleanup_sighand+0xc0/0xc0 [ 1384.880575][T27546] ? __might_fault+0x12b/0x1e0 [ 1384.885324][T27546] ? __might_fault+0x12b/0x1e0 [ 1384.890092][T27546] _do_fork+0x146/0x1090 [ 1384.894322][T27546] ? copy_init_mm+0x20/0x20 [ 1384.898814][T27546] ? __kasan_check_read+0x11/0x20 [ 1384.903827][T27546] ? _copy_to_user+0x118/0x160 [ 1384.908593][T27546] __x64_sys_clone+0x19a/0x260 [ 1384.913353][T27546] ? __ia32_sys_vfork+0xd0/0xd0 [ 1384.918202][T27546] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1384.923482][T27546] ? trace_hardirqs_on+0x67/0x240 [ 1384.928496][T27546] do_syscall_64+0xfa/0x790 [ 1384.932991][T27546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1384.938867][T27546] RIP: 0033:0x45a909 [ 1384.942759][T27546] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1384.962346][T27546] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1384.970741][T27546] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1384.978711][T27546] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1384.986672][T27546] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1384.994788][T27546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1385.002841][T27546] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff 15:19:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1385.021045][T27529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.108432][T27546] memory: usage 307200kB, limit 307200kB, failcnt 6164 [ 1385.115681][T27546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 15:19:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0xd, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4d, 0x0, 0x0) 15:19:19 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000a, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) [ 1385.278737][T27546] Memory cgroup stats for /syz5: [ 1385.280632][T27546] anon 270934016 [ 1385.280632][T27546] file 151552 [ 1385.280632][T27546] kernel_stack 6488064 [ 1385.280632][T27546] slab 11288576 [ 1385.280632][T27546] sock 0 [ 1385.280632][T27546] shmem 65536 [ 1385.280632][T27546] file_mapped 0 [ 1385.280632][T27546] file_dirty 0 [ 1385.280632][T27546] file_writeback 135168 [ 1385.280632][T27546] anon_thp 249561088 [ 1385.280632][T27546] inactive_anon 135168 [ 1385.280632][T27546] active_anon 270995456 [ 1385.280632][T27546] inactive_file 122880 [ 1385.280632][T27546] active_file 45056 [ 1385.280632][T27546] unevictable 0 [ 1385.280632][T27546] slab_reclaimable 1081344 [ 1385.280632][T27546] slab_unreclaimable 10207232 [ 1385.280632][T27546] pgfault 173976 [ 1385.280632][T27546] pgmajfault 0 [ 1385.280632][T27546] workingset_refault 198 [ 1385.280632][T27546] workingset_activate 33 [ 1385.280632][T27546] workingset_nodereclaim 0 [ 1385.280632][T27546] pgrefill 2180 [ 1385.280632][T27546] pgscan 2164 [ 1385.280632][T27546] pgsteal 282 [ 1385.405925][T27546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20454,uid=0 [ 1385.424066][T27546] Memory cgroup out of memory: Killed process 20454 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1385.654818][T27546] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1385.665413][T27546] CPU: 1 PID: 27546 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1385.674098][T27546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.686914][T27546] Call Trace: [ 1385.690202][T27546] dump_stack+0x197/0x210 [ 1385.694520][T27546] dump_header+0x10b/0x82d [ 1385.698921][T27546] oom_kill_process.cold+0x10/0x15 [ 1385.704019][T27546] out_of_memory+0x334/0x13c0 [ 1385.708680][T27546] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1385.714127][T27546] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1385.719917][T27546] ? oom_killer_disable+0x280/0x280 [ 1385.725117][T27546] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1385.730650][T27546] ? memcg_oom_wake_function+0x700/0x700 [ 1385.736283][T27546] ? do_raw_spin_unlock+0x178/0x270 [ 1385.741481][T27546] ? _raw_spin_unlock+0x28/0x40 [ 1385.746318][T27546] try_charge+0xf76/0x14d0 [ 1385.750724][T27546] ? find_held_lock+0x35/0x130 [ 1385.755477][T27546] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1385.761006][T27546] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1385.766533][T27546] ? find_held_lock+0x35/0x130 [ 1385.771280][T27546] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1385.776815][T27546] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1385.782346][T27546] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1385.787710][T27546] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1385.793253][T27546] __memcg_kmem_charge+0x13a/0x3a0 [ 1385.798363][T27546] copy_process+0x79d/0x7230 [ 1385.802947][T27546] ? __kasan_check_read+0x11/0x20 [ 1385.807953][T27546] ? mark_lock+0xc2/0x1220 [ 1385.812360][T27546] ? __cleanup_sighand+0xc0/0xc0 [ 1385.817278][T27546] ? __might_fault+0x12b/0x1e0 [ 1385.822026][T27546] ? __might_fault+0x12b/0x1e0 [ 1385.826778][T27546] _do_fork+0x146/0x1090 [ 1385.831005][T27546] ? copy_init_mm+0x20/0x20 [ 1385.835497][T27546] ? __kasan_check_read+0x11/0x20 [ 1385.840502][T27546] ? _copy_to_user+0x118/0x160 [ 1385.845253][T27546] __x64_sys_clone+0x19a/0x260 [ 1385.850001][T27546] ? __ia32_sys_vfork+0xd0/0xd0 [ 1385.854842][T27546] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1385.860110][T27546] ? trace_hardirqs_on+0x67/0x240 [ 1385.865261][T27546] do_syscall_64+0xfa/0x790 [ 1385.869776][T27546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1385.875656][T27546] RIP: 0033:0x45a909 [ 1385.879541][T27546] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1385.899132][T27546] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1385.907546][T27546] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1385.915505][T27546] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1385.923474][T27546] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1385.931530][T27546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1385.939487][T27546] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1385.954814][T27546] memory: usage 307200kB, limit 307200kB, failcnt 6185 [ 1385.962116][T27546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1385.969216][T27546] Memory cgroup stats for /syz5: [ 1385.969867][T27546] anon 270823424 [ 1385.969867][T27546] file 151552 [ 1385.969867][T27546] kernel_stack 6524928 [ 1385.969867][T27546] slab 11288576 [ 1385.969867][T27546] sock 0 [ 1385.969867][T27546] shmem 65536 [ 1385.969867][T27546] file_mapped 0 [ 1385.969867][T27546] file_dirty 0 [ 1385.969867][T27546] file_writeback 135168 [ 1385.969867][T27546] anon_thp 247463936 [ 1385.969867][T27546] inactive_anon 135168 [ 1385.969867][T27546] active_anon 270884864 [ 1385.969867][T27546] inactive_file 122880 [ 1385.969867][T27546] active_file 45056 [ 1385.969867][T27546] unevictable 0 [ 1385.969867][T27546] slab_reclaimable 1081344 [ 1385.969867][T27546] slab_unreclaimable 10207232 [ 1385.969867][T27546] pgfault 174009 [ 1385.969867][T27546] pgmajfault 0 [ 1385.969867][T27546] workingset_refault 198 [ 1385.969867][T27546] workingset_activate 33 [ 1385.969867][T27546] workingset_nodereclaim 0 [ 1385.969867][T27546] pgrefill 2180 [ 1385.969867][T27546] pgscan 2164 [ 1385.969867][T27546] pgsteal 282 [ 1386.066884][T27546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27536,uid=0 [ 1386.083608][T27546] Memory cgroup out of memory: Killed process 27546 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:35752kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 15:19:20 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x12]}) 15:19:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40186366, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9414, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000200)=""/106) accept4$inet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x100000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1386.105933][ T1118] oom_reaper: reaped process 27546 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 15:19:20 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000c, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4018920a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:20 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x48000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x5000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getpid() 15:19:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40206417, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:21 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) rt_sigsuspend(&(0x7f0000000000)={0x9}, 0x8) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0xb32000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x400000b7]}) 15:19:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4020940d, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:21 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000048, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x175]}) 15:19:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x80801, 0x9) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="fd70362d7384d6b8f4e010faffffff4f", 0x3f, 0x2, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x480000, 0x80) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) r9 = clone3(&(0x7f0000001340)={0x2034000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x24, 0x0, &(0x7f0000000240)=""/167, 0xa7, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[r5, r6, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9}, 0x50) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) fsetxattr$system_posix_acl(r10, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000", @ANYRES32=r11, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYBLOB="0400030000000000e6ff0b00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c", @ANYRES32=r12, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRES32, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) fstat(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001440)={r9, r11, r13}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$GIO_SCRNMAP(r2, 0x4b4a, &(0x7f0000000a40)=""/130) 15:19:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1387.638313][ C1] net_ratelimit: 18 callbacks suppressed [ 1387.638321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1387.650006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1387.968331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1387.974275][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:22 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x90a7e300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1388.038317][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4b564d02]}) 15:19:22 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:22 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:22 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x2, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1388.518280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.524147][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x309000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x80082102, &(0x7f0000000180)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:19:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x400000b7]}) 15:19:22 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:22 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2100, 0x0) sendmmsg$alg(r0, 0x0, 0xfffffe94, 0x20048000) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000100)=""/100) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4080aea2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1388.678297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.684258][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.690187][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:19:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4080aebf, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) 15:19:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sigaltstack(&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100)) 15:19:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:23 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x3, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:23 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(r0, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000000)) 15:19:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4090ae82, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4138ae84, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b81", 0x86) sched_setattr(0x0, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x2, 0x3946, 0x0, 0xfffffffffffffffe}, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendfile(r1, r0, 0x0, 0x0) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0xff, 0x0, 0x8e5d, 0x4}) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000100)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r2, r2, 0x0, 0x24000000) dup2(0xffffffffffffffff, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:23 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xfffffffffffffff9}, 0xf) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r2, 0x5, &(0x7f0000000180)=0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = clone3(&(0x7f0000000380)={0x201400, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000340), 0x28, 0x0, &(0x7f0000000200)=""/140, 0x8c, &(0x7f00000004c0)=""/117, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, r5, 0xffffffffffffffff], 0x4}, 0x50) rt_tgsigqueueinfo(r4, r6, 0x0, &(0x7f0000000400)={0x2e, 0x173}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = dup(r2) getsockopt$inet_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000000540)=""/222, &(0x7f0000000640)=0xde) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe2, 0x0) r10 = openat(r8, &(0x7f00000001c0)='./file0\x00', 0x0, 0x110) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f00000002c0)=0x2dd) 15:19:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x41a0ae8d, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:24 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0xf, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) prctl$PR_SVE_SET_VL(0x32, 0x1c903) r1 = socket$inet6(0xa, 0x3, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000480)=""/172, 0xac}, {}, {&(0x7f0000000540)=""/227, 0xe3}], 0x5) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty}, 0x0, @in6=@rand_addr="6f3829d7da47d9bb345810ed11c63d35", 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 15:19:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xffff) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000040)=0x1000) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xbe, &(0x7f0000000100)="2a6c84fbcdbeb9fae4acc6f11fd991821ecfe64a995ed1a2b5ee095b2c2c8d883eead993d9c8f6b8566f27de819dd5b6a890f141c7511edd50210122291fcb1eed4f71f10973009153e9cb9b12e1c60de23c3d1306f2193dc444363f1e12baf06e73a73a0c769fea5decbb3033936af2d8b12c8ccaf15ffd1857ee50beb5cd6578de0fd0b55d1da701f5a6597151dc66c028b7b4251079bc6c402c3ec0b1d616dd0c1296afd5d651dd331fcb92d1d634ab10833b6623f23b91f809b6eb2d"}) 15:19:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x800454d2, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) [ 1391.220883][T27934] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 1391.257499][T27934] CPU: 1 PID: 27934 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1391.266239][T27934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.276306][T27934] Call Trace: [ 1391.279619][T27934] dump_stack+0x197/0x210 [ 1391.283967][T27934] dump_header+0x10b/0x82d [ 1391.288392][T27934] oom_kill_process.cold+0x10/0x15 [ 1391.293524][T27934] out_of_memory+0x334/0x13c0 [ 1391.298206][T27934] ? find_held_lock+0x35/0x130 [ 1391.302990][T27934] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1391.308802][T27934] ? oom_killer_disable+0x280/0x280 [ 1391.314016][T27934] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1391.319571][T27934] ? memcg_oom_wake_function+0x700/0x700 [ 1391.325214][T27934] ? do_raw_spin_unlock+0x178/0x270 [ 1391.330424][T27934] ? _raw_spin_unlock+0x28/0x40 [ 1391.335284][T27934] try_charge+0xf76/0x14d0 [ 1391.339729][T27934] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1391.345287][T27934] ? cache_grow_begin+0x122/0xc60 [ 1391.350332][T27934] ? find_held_lock+0x35/0x130 [ 1391.355099][T27934] ? cache_grow_begin+0x122/0xc60 [ 1391.360163][T27934] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1391.365711][T27934] ? lock_downgrade+0x920/0x920 [ 1391.370566][T27934] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1391.375945][T27934] ? __kasan_check_read+0x11/0x20 [ 1391.380980][T27934] cache_grow_begin+0x5e8/0xc60 [ 1391.385844][T27934] ? write_comp_data+0x21/0x70 [ 1391.390614][T27934] ? mempolicy_slab_node+0x139/0x390 [ 1391.395909][T27934] fallback_alloc+0x1f8/0x2d0 [ 1391.400599][T27934] ____cache_alloc_node+0x1bc/0x1d0 [ 1391.405812][T27934] ? trace_hardirqs_off+0x62/0x240 [ 1391.410933][T27934] __kmalloc+0x220/0x770 [ 1391.415704][T27934] ? kmem_cache_alloc_trace+0x397/0x790 [ 1391.421271][T27934] ? alloc_pipe_info+0x1ee/0x4f0 [ 1391.426223][T27934] alloc_pipe_info+0x1ee/0x4f0 [ 1391.430998][T27934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1391.437248][T27934] create_pipe_files+0x8f/0x770 [ 1391.442124][T27934] ? put_timespec64+0xda/0x140 [ 1391.446922][T27934] __do_pipe_flags+0x48/0x250 [ 1391.451611][T27934] do_pipe2+0x84/0x160 [ 1391.455687][T27934] ? __do_pipe_flags+0x250/0x250 [ 1391.460652][T27934] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1391.466140][T27934] ? do_syscall_64+0x26/0x790 [ 1391.470825][T27934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.476897][T27934] ? do_syscall_64+0x26/0x790 [ 1391.481583][T27934] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1391.486967][T27934] __x64_sys_pipe+0x33/0x40 [ 1391.491481][T27934] do_syscall_64+0xfa/0x790 [ 1391.495995][T27934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.501886][T27934] RIP: 0033:0x45a909 [ 1391.505812][T27934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1391.525413][T27934] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1391.533827][T27934] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045a909 [ 1391.541825][T27934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 1391.549800][T27934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1391.557777][T27934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1391.565750][T27934] R13: 00000000004fa6e7 R14: 00000000004dfd70 R15: 00000000ffffffff 15:19:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8004ae98, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1391.633641][T27934] memory: usage 307200kB, limit 307200kB, failcnt 6249 [ 1391.649993][T27934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1391.671992][T27934] Memory cgroup stats for /syz5: [ 1391.672112][T27934] anon 269516800 [ 1391.672112][T27934] file 151552 [ 1391.672112][T27934] kernel_stack 6672384 [ 1391.672112][T27934] slab 11423744 [ 1391.672112][T27934] sock 0 [ 1391.672112][T27934] shmem 65536 [ 1391.672112][T27934] file_mapped 0 [ 1391.672112][T27934] file_dirty 0 [ 1391.672112][T27934] file_writeback 135168 [ 1391.672112][T27934] anon_thp 247463936 [ 1391.672112][T27934] inactive_anon 135168 [ 1391.672112][T27934] active_anon 269533184 [ 1391.672112][T27934] inactive_file 122880 [ 1391.672112][T27934] active_file 45056 [ 1391.672112][T27934] unevictable 0 [ 1391.672112][T27934] slab_reclaimable 1081344 [ 1391.672112][T27934] slab_unreclaimable 10342400 [ 1391.672112][T27934] pgfault 174603 [ 1391.672112][T27934] pgmajfault 0 [ 1391.672112][T27934] workingset_refault 198 [ 1391.672112][T27934] workingset_activate 33 [ 1391.672112][T27934] workingset_nodereclaim 0 [ 1391.672112][T27934] pgrefill 2180 [ 1391.672112][T27934] pgscan 2164 [ 1391.672112][T27934] pgsteal 282 15:19:25 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x48, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x15000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020662a, &(0x7f0000000040)=0x1000000) [ 1391.808516][T27934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20436,uid=0 [ 1391.946562][T27934] Memory cgroup out of memory: Killed process 20436 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1392.052070][T27933] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1392.063181][T27933] CPU: 0 PID: 27933 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1392.071883][T27933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.081949][T27933] Call Trace: [ 1392.085254][T27933] dump_stack+0x197/0x210 [ 1392.089614][T27933] dump_header+0x10b/0x82d [ 1392.094037][T27933] ? oom_kill_process+0x94/0x420 [ 1392.098984][T27933] oom_kill_process.cold+0x10/0x15 [ 1392.104099][T27933] out_of_memory+0x334/0x13c0 [ 1392.108799][T27933] ? find_held_lock+0x35/0x130 [ 1392.113574][T27933] ? oom_killer_disable+0x280/0x280 [ 1392.118773][T27933] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1392.124405][T27933] ? memcg_oom_wake_function+0x700/0x700 [ 1392.130039][T27933] ? do_raw_spin_unlock+0x178/0x270 [ 1392.135226][T27933] ? _raw_spin_unlock+0x28/0x40 [ 1392.140064][T27933] try_charge+0xa54/0x14d0 [ 1392.144477][T27933] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1392.150009][T27933] ? percpu_ref_tryget+0x102/0x230 [ 1392.155132][T27933] ? rcu_read_lock_held+0x9c/0xb0 [ 1392.160177][T27933] ? __kasan_check_read+0x11/0x20 [ 1392.165214][T27933] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1392.170790][T27933] mem_cgroup_try_charge+0x136/0x590 [ 1392.176082][T27933] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1392.181705][T27933] __handle_mm_fault+0x1f1f/0x3da0 [ 1392.186816][T27933] ? vm_iomap_memory+0x1a0/0x1a0 [ 1392.191739][T27933] ? handle_mm_fault+0x292/0xa50 [ 1392.196686][T27933] ? handle_mm_fault+0x7a0/0xa50 [ 1392.201611][T27933] ? __kasan_check_read+0x11/0x20 [ 1392.206622][T27933] handle_mm_fault+0x3b2/0xa50 [ 1392.211378][T27933] __do_page_fault+0x536/0xd80 [ 1392.216131][T27933] do_page_fault+0x38/0x590 [ 1392.220627][T27933] page_fault+0x39/0x40 [ 1392.224766][T27933] RIP: 0033:0x4120ff [ 1392.228658][T27933] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1392.248244][T27933] RSP: 002b:0000000000a6fb10 EFLAGS: 00010206 [ 1392.254291][T27933] RAX: 00007f4c4044c000 RBX: 0000000000020000 RCX: 000000000045a95a [ 1392.262288][T27933] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1392.270282][T27933] RBP: 0000000000a6fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 1392.278252][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fce0 [ 1392.286222][T27933] R13: 00007f4c4046c700 R14: 0000000000000001 R15: 000000000075bfd4 [ 1392.299678][T27933] memory: usage 304884kB, limit 307200kB, failcnt 6249 [ 1392.306813][T27933] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1392.314490][T27933] Memory cgroup stats for /syz5: [ 1392.314603][T27933] anon 267362304 [ 1392.314603][T27933] file 151552 [ 1392.314603][T27933] kernel_stack 6672384 [ 1392.314603][T27933] slab 11423744 [ 1392.314603][T27933] sock 0 [ 1392.314603][T27933] shmem 65536 [ 1392.314603][T27933] file_mapped 0 [ 1392.314603][T27933] file_dirty 0 [ 1392.314603][T27933] file_writeback 135168 [ 1392.314603][T27933] anon_thp 245366784 [ 1392.314603][T27933] inactive_anon 135168 [ 1392.314603][T27933] active_anon 267460608 [ 1392.314603][T27933] inactive_file 122880 [ 1392.314603][T27933] active_file 45056 [ 1392.314603][T27933] unevictable 0 [ 1392.314603][T27933] slab_reclaimable 1081344 [ 1392.314603][T27933] slab_unreclaimable 10342400 [ 1392.314603][T27933] pgfault 174603 [ 1392.314603][T27933] pgmajfault 0 [ 1392.314603][T27933] workingset_refault 198 [ 1392.314603][T27933] workingset_activate 33 [ 1392.314603][T27933] workingset_nodereclaim 0 [ 1392.314603][T27933] pgrefill 2180 15:19:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x1, 0x3000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x15000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020662a, &(0x7f0000000040)=0xffffffff000) 15:19:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x80086301, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1392.314603][T27933] pgscan 2164 [ 1392.314603][T27933] pgsteal 282 [ 1392.410947][T27933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20383,uid=0 [ 1392.427280][T27933] Memory cgroup out of memory: Killed process 20383 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x100, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_getaffinity(r3, 0x8, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x80184153, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000000)={0x0, 0x5, [0x0, 0x0, 0x1000040000071], [0xc1]}) 15:19:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b, [0x4d0]}) 15:19:26 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = dup3(r2, r1, 0x80000) ioctl$TCSBRK(r4, 0x5409, 0xf176) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1392.678356][ C0] net_ratelimit: 17 callbacks suppressed [ 1392.678368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1392.690041][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) [ 1392.838299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1392.844152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1392.850072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1392.855861][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:27 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8038550a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09b805000000b9800000c00f3235002000000f300f01d90fc728c4c1f9e79f2e000000", 0x43}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 15:19:27 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200020}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xc4, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8040ae9f, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="c6a88d802146bc9924a29a4d7f250de66ea7ec5e962c93d1a1b66ddd10f39a212866add81ccab4031c5751b42309cc8904b8d52e0110c13d69cf8d84959ee7a9cf43634563236ef04fff5a", 0x4b}, {&(0x7f0000000200)="92ebaf2a093b8a8b3e30ed7fc55ee8e006693d31c0398312310ad000e13b8929bb03e147192e7d775abff80567ed323bb09595b72a421a95091e730a318caca37de7a8f6c86e9b99e7c2265d18f83282dee2a7e55cd208b7d9a8d31069d9b323d862a85cf6552c67c6da5dbce9e8f6d58a77b59c95eff9c10888595221ca156b08a48aa953964cd193", 0x89}, {&(0x7f00000002c0)="4826464576d1f84c31b306bedf7f315629cad1278676e155435ebc65890e2d13caf969b5afc616af2eb238ec88bb1d772459e4cda02b877456f1d6f6417a265187be42b32e4e3928acf3c2e5a786481f96637e82afc39fc7b95001f3e51f390a82feb95ad4630103baec24dca69e11939125f43f6e05cec55e93c052f40773ebf31a70e5a998fdbba932a9055c25681c46821993bd4bf0f9b7eb1a0735ca7e5142bc9875f9ede1afb48d752abe863c685221854cc22e1bd9c662c643d0ac800ba7c14426bf31e74c9e4649", 0xcb}, {&(0x7f00000003c0)="068789fe1bfb822da7b966a85b763bb7a24f661ef44ce08e5aa0a0ba0155ceb9d538366e2221e348ea1eb36f9bece1ccedeeb655a854d073e8e973c35653025f6978e12edcae9b6b35bb128de43952c90799805af5459b32dde700dc7d7ea3332c23e50236e3f127c5ed0f059999", 0x6e}], 0x4, 0x240) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8080aea1, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 15:19:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4188aea7, &(0x7f0000000000)={0x7b, 0x5, [], [0xc1]}) 15:19:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8090ae81, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x0, 0x8b, [0x4d0]}) [ 1393.878303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.884163][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:28 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@lsrr={0x83, 0x7, 0x20, [@remote]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 15:19:28 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x0, 0x8b, [0x4d0]}) 15:19:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8138ae83, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8188aea6, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@lsrr={0x83, 0x7, 0x20, [@remote]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) [ 1394.368438][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.374363][ C0] protocol 88fb is buggy, dev hsr_slave_0 15:19:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x0, 0x8b, [0x4d0]}) 15:19:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8000, 0x8004, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7fff, 0x200, 0x8, 0xffff94d9, r1}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x81a0ae8c, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x7d) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b661c7ae47f515defdd06b4372ddcc06495aff8fd51ef4c89cc2078ce9d5ce85d764424fd38cb2e6892f21297cd346ea9813da6b6048649a777444336710101e", "071af41754b8533c457971074bd267a0f91fd29760e2a51488b2d1db32293872c7ec76a888d155df8cd905f91dc02c2d30d6f0e6996f3ac2f01a5a3a5d0a1937", "b5f54804311ea8bdc98834798aa15a29ebdb01d499c246023f0bb217f6d3b0d4"}) 15:19:29 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x2000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b}) 15:19:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)={0x64, 0x6f, 0x2, {0x7, [{0x0, 0x2, 0x8}, {0x40, 0x1, 0x1}, {0x4, 0x0, 0x4}, {0x10, 0x0, 0x1}, {0x1, 0x2}, {0x3a, 0x1, 0x7}, {0x20, 0x4, 0x3}]}}, 0x64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000300)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xbc, 0x0, 0x100, 0x5b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @empty, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @local, 0x2a21}}}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) write$nbd(r6, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) sendfile(r6, r6, &(0x7f0000000200), 0xa198) 15:19:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8400ae8e, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x106002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$P9_RMKNOD(r3, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x5e, 0x0, 0x7}}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000200)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x20000) 15:19:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x98030300}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x22000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc004500a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) connect$packet(r3, &(0x7f0000000240)={0x11, 0x1c, r5, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:29 executing program 1: 15:19:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b}) 15:19:29 executing program 1: gettid() dup(0xffffffffffffff9c) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000001c0), 0xfffffffffffffc9a) 15:19:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0045878, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:30 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x3f00, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x8b}) 15:19:30 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000130a075a1dfffd946fa2830020200a000900037a001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 15:19:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0045878, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:30 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0xffffffffffffff0a, 0x280d8014) fstat(0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x67}) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 15:19:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1f}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 15:19:30 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x880, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={r6, 0x80000, r4}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r7, 0x80000, r8}) 15:19:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1f}) 15:19:30 executing program 0: clone(0x3106001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) wait4(0x0, 0x0, 0x40000000, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r3 = gettid() r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) tkill(r3, 0xd) dup2(r4, r2) 15:19:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae91, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:30 executing program 0: 15:19:31 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x4000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:31 executing program 1: 15:19:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008aec1, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:31 executing program 0: 15:19:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x8, 0x100, 0x4, {0x2a81, 0x724, 0x6, 0x4}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x9, 0x2}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0xa01c) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xffff, 0x9200) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7f}, 0x2) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000100)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:31 executing program 1: 15:19:31 executing program 0: 15:19:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0189436, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:31 executing program 1: 15:19:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:31 executing program 0: [ 1398.038329][ C1] net_ratelimit: 18 callbacks suppressed [ 1398.038335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.049862][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:32 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x200000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc018aa3f, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:32 executing program 1: 15:19:32 executing program 0: 15:19:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)='/dev/kvm\x00'}, 0x30) ptrace$setregset(0x4205, r2, 0x6, &(0x7f00000002c0)={&(0x7f00000001c0)="0fb59984e779307dc94a82755fb4539dabef2875d0872033dab1eb671fe4852ce7188cb8f25579d22b759d4a5274858130c9ab45bd816b9bae36962ac740834e95a8606b567089fbaf2e94ffa6a00eb1fa9fef5834752bfd2d107bd1881124d0b5938a3d8ef414ee717a0ab345bbdc106f2920ce277d639a245d61a9906474d821395cb75b1e08f947c20a19c9a9a45f228951b5d80919a2dac33e139d1581a069316692c67d5e8d2407027757d62caa82f309eca3fab16745b36b468cac92a2f57e5eecd947b2e0", 0xc8}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r4, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={'crc32c-generic\x00'}}) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) r9 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r7, r9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={'crc32c-generic\x00'}}) keyctl$instantiate_iov(0x14, r6, &(0x7f0000002680)=[{&(0x7f0000000300)="0d826fccd316ed3b33cac2dab9f3ae5863cd5627cdd8b29728078ac66843bf279ab3aa90fef9a83ae0ae5c729b0f921c83c936a721bf30e4ad3a7daa780bee7c931d1ddc51879f4a62f0eb957b7b0cf7589d183500b2c32ef71b7d91a85ae9a217c3cf775197758983", 0x69}, {&(0x7f0000000380)="5c19abd95b19f1ba864cb3ac7a420385f2996576ec93afafd5fa0881d1ac99997f32e9872af1ae5066ed5ddffcfc3cb67386bf3e8516bea36aa0b82b6354b993e4c9538cf6e8d85acc1a", 0x4a}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="a98b57072d80dca5637099d436f7bce82b92961c238159fccb499b4eb318aad28b3eba8fa0b8045cc4737e948a71496da5f0f0f097a3d9e663fff4338fabd17697aac32f79e61aa3f2a9094819233a17c58abae69e341f5b512fd8eeaa4e4b054927f821011e0a1586774246f4f02cd90d49425a4bd3018d1986a68db2228d032ea1e72e8bb4", 0x86}, {&(0x7f00000014c0)="e11030a2f36135a13472f43c99b07aa3ba7782932271f300fc2be39115aa608cc12f74cc3eccbfe612db2f3996912174cb946b5cfc1e9554b9fbcb3a1a3851c24e077aa2c3d7e814473312da1ab0355fa3b26be4449cbbe00475d2c32ed4367b4ed34df647af371dc8f5d42c3f2763d2c439c96a67870f7a273a6f8df2d1364ed990e43fdb4299243678bb1cf68ec91bbb45559f95d8ecf3f2d2700ad27522eb92a364f3f42600123131df7b3c898b9e333f101f96b2cc147a6273e07995ccc8141e9a8511430518313d5447ea26debac9911f1fa4edb61407cf175770ba80482f60484dda5b8d50240db30be00b23f3cd3dc638769edf5fbbc2b8f057aa18b26fe5db4d98a00a9360eb1e173c3cd5ffc9f1b875ae57799c35d7521ebbdae5dcf343e80bbce09c9eaeb3bd1881df352246a00835bc273601814578aa3b342c2d7d2e5d6232f324f941675b18f60377e003c8e0b519dab9ebb952db826c8e98c83bd7dfc8d5c62ed96569470c5156d0c47a3ed21cba8f9c0c7ce9f1df186a4a174431f610f5bbcc5f231140a917f5d1627805b8d875a544a2766e9399143102a2ce46a5c775d74629a437218302871a3cac5669714884bf08552a64a1b5040d6e48ad5d66b2950d0f5dc243f9736f76c812917fb2cd98ed916f396bd42490894f539ec816dc8d1949ab23f398b06d86cae37e1361f8ace6cc0ab3ad6b0f3cd0977262c83781e343d050ac5a5cc93d0d18a7a274861f0f37b45790650431df2f7f08120bdcb0c61d03571c76863d162b15b4e2ed3657c22ac496cfb5dc229766ad648d94f96296357f43db914cacc84eb2d30ae080ef3622c6e170f310e3f62858f1346ad4174e7bed5dad8f7433e732533fbd6b013ac8c62a0448fa5cb6b1e292f4ee0a11e97976aee7ac23887139df16abb08ef22f8b0f865bee4c5ae168b81f6af2a77baf5dba8bd58848ad494a90a6543a2bea6430b84b9f76fa4f5739036810fa4db02080a188fe2956a4c919d6d1a81118c4eec10f3449cc4f36cbaabd4f58f7d15bf466bd23092b566263edab4594a93d5deec9810c1b1c2ec50ed358186d48710788f8bf18fee92fe9f49bdb04d682815fe94ef8be33c38dd3f195062136412886ca242769f2acd74f2b109af8102831b0c967da24d36e73e741be5e5b75fc2fc792e4124ed149da96e7468b34eb2ac50a9742f6f042fccbe9f6c57bbd98ae587920fac983b2ff872f4db9f6f24aaaa9192b90ebb1c5b0cc4a4e19c3259628c927e2d66774dec2607b3cecd32832fd24c7391f7bf7f460575ebd9d675c440812c1e6548551eeb607435e5849bbe84ba8c055694873deb00ab53be213cb7d340200b0920a1db4e6834ca628fe7da6e2170740bc8d1e72f0096e0f14301b039e220e80bb2133468a75662b9c0d355410cf4700380933929cc46a93658f798c3a70b33535f226433d9f314d280f056ed6b9ba8c48011442628be4ee020923b233e933f4f75d558076bc0142675e19b3b6f4f51eb7b597a25e80fcdfb55fee97d93e0d3ee3b08648c7072454c78842d9895d287478b01d027eb5e9d2b7defd96b46246eedb13469d9d58952703dd225f0c35778858ae20131704b80f7c38fe04558759df489442cd3b3609607a2e7808835e20ea0c9afd44949e8313a29a38b5c6f6875e6e9fbed385ac03260b503b66258902f7091b66c1e1c7ea3a86b13bef521fbf0ed157a6216d253d9d6e355289e8353dc977bd0e65ae423afd89baf26cb1f40080b76b74cb95787aa8ee2adccb9191519a8f417c2292e557cfe3bc7728fb8b7fa4bbc3debbda490db5240be4b3b724d4e3ee80919d3d8df76a51911f00bb87d93a2dd0ff3e980754fec4d3b234caf8d8f5042ca722d0ac88ab00b7b6108511e85bdcdbbec2f9c0e4e98afbf497d4372dd7c0efcca2778d16f8addff58a4a91e6203490ae073168a984aebbb47f17144b94e699460a2a70492b2d2514648793ff9cb0c1a1cceb6730c9a9754826350651c0ba6d68b1412277c7bfd5a474384bf005fd5a6b471e2a85ca9ed686627bd18eca555fe2ba9f6fa2c8a1c9e8eabf9ea9fcc08ccd66481114a43078fbe6986c4b50f9821c57edb773576194cc7a5310181330ec9cd0c62a7e26d1b1edef91792d20fcaf5fd422f335180f4a6fe5de5277a61fe12f3329d643b0189fa4c2d1bce1e8ed2ea28fc69085f0c8f08918b6b7d467ee0c3577208a331f68cf380217c3c896c74c43ef470717692fdfd75056d97893173872319737d824b8360bc7e0cc112064106d5a866353497904872e08876c62c9e6330941a8db3f07b24ecc43051d2e2148d211921656ac8ed16de8694b0943f23c19bcc72bb3b18946d8ca587db2b7524763ff4de746e628980c22654344347040b52fb966773f5001ae2dd260c069b51a5deafc08fd3da89b6c3ac5c1bf69dd9cfc7f133496a5a5c429f51f372701abe1a0e56a012090dc2e7c516df24c93e53c50588df718ee85d99c50d974fb24ae2e30316f4a3d20c10967b3e619d79bc0ba82e581251a41694ab1946ee14981c186a211fa1410c961548ef7e191cbb24094500fb4042df3261b7a724ef3814b25fd71e3b95a87bcd95b3ce9f6184480013c17d968c2af05930bab69e2a87308d5945a0516ef06bce02f5e07535f71cde443cb48a4941978545db83f52dd6b5be25a83709638132cd027b309541d3f4bff21876b19e7141b7f400638e142410d6f995ee9694fd7b46840565edc41d88e92100a5cbf31d0d1e11c30e159921a05243de32cbdcf5e241e458cf9bfb981f4fa64218e52a68dabf85d1b844f1056a60223a627f05d5fc3caba28b1891fd3d8c34dae8c4c9bcaca062555b257beb307014eed917b05bfd8c3294dd49bca79f87f1a754f5bf414dcf6476ce28574e42cfaa375225423edbb0b5234713318de0a0e8eeceb220fb840425d3a27632ce1c5345ceb3dc7285b8e87f295cd836607b138c1ce380e3881586ec64bcd622338402f601139cc9ddabf4f02f189bb5a4e92e905c784db59a01f5b84f230c434485efb87d392d92a84e168de756ff72744596717d2a4faca587bfb0829cacd1db307974210cf73305043fb57915d115ad65846e1caf621427390ea7407372aee623d9e006b91c0137b49d6694b3868c6f4e4eb574624d5980e66d76d12cffedde7a33dcc76b4a4a9521c7c664684cf585448e21ce06d53a40ee909a385812e3bd72520264cfc739381f3621247baf69cf32447b77ea7f7f2440fd9725720355b342f13dc0471575832bd77638231a445ddc1c9f7228956eac89380344854a85a1a89ecae7457ec43a0946fbeaea719b0c0c70184b57934df16e06723426f417e8ab5df68f23d824c584262d67a31e73abff9fbb245925ee7df430a01975f6a05db0f188c17c298eb230173ea7bd4c18fe788f24c978897061daafce250c46378736a56d8fb8cff828732d737f220e2119db444ae1b79912235e44fa6c073058462abeca1e7e1e627ff54c0497c5b969bbb47816a491025d98bd0a78fa99e16d421d73f6fc8dd5de8c4df8e8a7667ec3e28e6c4c4388f9bb9c4d25c829e27c71165c3e241064abd2a587729600161c207ca69362a830b2d4465621093f3a04d11a117612ae33b7756176355656b16d9b6502e93356a5717e4042a1a92e7d142faebe0e56f1e13e6b6ad924ea8e5d1747c32ddd69a3ac1f2b70da6bac4710666ccb7c115ef16317ef3b8da0ab5f8de3aba7709cf55b74e3297284f89ceb900a5cb67b99c71d49ab54ca2ea953f72ca774810e99e057739d2512c655fae11df01a2541ce5dd895eb1f295a59d92b0d32a6a2aab2c25110ac480dbf6f8220555441b51cd1556e8e8176ce285e6402f7cce54174cb1b425c23a86475bd9b279408fdefab7ce54fd223aaabbf4ae1dfea0c55b2e88ef1113c3a8b664c0e8b8544384a046bf29d594abbfebfcbf29eee0b0819d69aca5ad38278c31ba42ec31972b4f2544696aa2bb441ea98e3bcc5bcc5c6641f58d6ea74fb9d386bdeed0673569f3c1598dfb09e90f016a0181916017b7299643cefcc6dd71b7f59fb735d32a140d4ba252032396ae5473aa70b9017f68a259f0ff7893960e24c302914c61d62d3a6ee98ae6d4c70fa764549fb20bff5d45838d30b0bffa2b847ee0221fdd931b2492d2fc98135c637c72e69b240d552b8fc16a55a09a56be3ec7d3fdc9df02f151b4200a141e6293571dc33dcc7353ed8f03144c805be847cff6afed877da09a81a9642fd9c976beae5e88ba4554863ad07766ec0365dd94295855b8d6ffe1611938c58561eb9e13452fe83bf8dad8375522558a6e454e25cef5d04c65e962e634e449554d8c8e1e4e8b857b8b698c2ec70a6cc6d3b3b2e11eaa7935ca75f9e231881935fc3685ada198654b7847ce22a81ca71d52339984c8c53c5d043088dec88f59261002109a9c0f6cc8183734ed1bd7b5d97d872ec4f3bad6ba03aca2cc79447052295ccf0d653b2757f7b777b0e48a9c7dbf512bdff4ab8f6f329add42583063729fcfd2e0e132112ecb05af0797576fa996d3d44f1a8a18a05f9513bbf747837f45b7ccd5b2f6a1ddb3c1be3dacc8bef05fcb6d942b7f6d4c0c8573f9b9f6bcb0bd55f59e9372e1452cf94718e3929303355002480fdac3e769573487dd24934bca8dc38e87bffdf24a87d20bcb43e4f1aa72f663932126e15dfe301d53a6f06ae1562e6592b17bb68c9565303a4b31fa0a724fc9a495e75e2d04a91c0cc1c23a1ad0d6ed8bd99e2853c916bf3e5f10094610fa2d6305594d04cd8b53c2eedbd1f2e6df5970c585654ce4e0097b313bffd348299dcb575259fab063841260401f7b38cb4d6d81f6a315d009090e6fd1dff97915a2932229f8bf2d216b713d189787a8602c49f52c20cf495106d89cff5f387c408ad681e94701f619bc533aaa72cd2d8129c2c5fbd1a1defeb615e846fc13dcc5f099b488ee3e8aeff8ab9653a5c426db15f87f1f20580ce3b97c46266d70b8807a1d73950023c0146caab68e2b1692b47fbbf575e7f4be82c449477a34e6214b02555abcc6d24d7824c0ec4df8100c064d80565ef254b1ebbf2067f370c6c99dfd5c419e02342d30e7da9f7b0ac38031fd272c502cb3b43f7a9373aec59ff765ff45e0927527342a2ff803e572f5e5233f5d4b405128dd05e07518794a16410cad4e4011eb4fafca15eec487888c6266782851d2ddc286de2a8f7e2614d32e1aeaf7e7b7c0180fb23b9127a4cd167f27b73bf96ea23f8d50c987195b6acb202d29f2855330505728199532c20f614917dd994349027e36e33593081327fafbf174e3997ffe7e44ab77fa853a7059e2e92b2cc00c80a5b63ad383481313f6f005cfc087ee51ba354e3be9dfb9c63c439961ac2ea26105d2c8acc3196025feeae1cf0ad495d57d077a7a0bcdc7bfebb3f7fdf8f7387088908a25ed7fdcadc47ea131cdeea36b78c8aaa4b5dd18b1c5bc6831703d87cbfc7c4513796da2b05ac6c940d8ea13b983e83c1c9e26bf78526385ecbf42d3ddfcf940f673dcf58fe4eb48b761832c9e4f58fa588766835aa044a79e5fc9f79e81b5df04601fbf91fbdb2b0a0d10b000e26ca2ebec51b841e5aa1ca5c3960f0a8a2fcef09aa231ebdd10ac8abc9447736fcbe113b862ea4e51aa799eef78eb9f143161a34bd13196578be6e334ec9c43b2e1baf595d3278f60c6495ff6d93c94ce884db9e7cb6534e96f857d4e56b9ccadc721ab119be09bbc571d4fc5eda8be9b0c3c", 0x1000}, {&(0x7f00000024c0)="3ff1437dcd6fe29676a3571f8e1be66d8c2d528014a49405a537b47bbd906251cada9bb1a390b281e577fa788836bb4124a0d49f9399b1ec0efb775b8126ebdc4b8869463686a5063eaa8b10e8efc90899b8430e4684364dd2087805ac8663195aa59a9e65db477c09a52a751e01e2c1d5069ceb38c90ebf76814f3b181ac07ad749243e4203e0fdcc2bcbb19db9a4dc2983122cd853375e3c63b421e6365e9a1658394aa96186550b363fb45fc6f4801426d001500ad6fde6705074ab572b31ad018f5d58c8df01633b4edf464f68d359bdf8be030f3406c95eca910c4a74bce8fbbd7ab04146ad9a", 0xe9}, {&(0x7f00000025c0)="c3dfe18b997bb31026c077bcf8f85afe91a8c46c06acbce98110d4181ef916c326d25999f8a13a5a5a67b22c99f4da3b542223f995862943f5f83d1304247b5ff3b8159dc123bd85dcd051bf018b2e344b0c7ecf541b91da6f5421a03ec931c6976b06a4a288cc02a8e3b54767447d54bcab09292d97a324de5158cc23500ff380", 0x81}], 0x7, r9) 15:19:32 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x7}, 0x28, 0x1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:32 executing program 0: 15:19:32 executing program 1: 15:19:32 executing program 1: [ 1398.434917][T28343] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1398.475347][T28343] CPU: 1 PID: 28343 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1398.484083][T28343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.494154][T28343] Call Trace: [ 1398.497453][T28343] dump_stack+0x197/0x210 [ 1398.501792][T28343] dump_header+0x10b/0x82d [ 1398.506217][T28343] ? oom_kill_process+0x94/0x420 [ 1398.511156][T28343] oom_kill_process.cold+0x10/0x15 [ 1398.516266][T28343] out_of_memory+0x334/0x13c0 [ 1398.518407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.520961][T28343] ? find_held_lock+0x35/0x130 [ 1398.520984][T28343] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1398.521001][T28343] ? oom_killer_disable+0x280/0x280 [ 1398.526794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.531462][T28343] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1398.531477][T28343] ? memcg_oom_wake_function+0x700/0x700 [ 1398.531498][T28343] ? do_raw_spin_unlock+0x178/0x270 [ 1398.531517][T28343] ? _raw_spin_unlock+0x28/0x40 [ 1398.537334][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.542475][T28343] try_charge+0xf76/0x14d0 [ 1398.542506][T28343] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1398.585017][T28343] ? percpu_ref_tryget+0x102/0x230 [ 1398.590131][T28343] ? rcu_read_lock_held+0x9c/0xb0 [ 1398.595157][T28343] ? __kasan_check_read+0x11/0x20 [ 1398.600209][T28343] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1398.605757][T28343] mem_cgroup_try_charge+0x136/0x590 [ 1398.611046][T28343] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1398.616684][T28343] wp_page_copy+0x407/0x1560 [ 1398.621273][T28343] ? find_held_lock+0x35/0x130 [ 1398.626040][T28343] ? follow_pfn+0x2a0/0x2a0 [ 1398.630545][T28343] ? lock_downgrade+0x920/0x920 [ 1398.635393][T28343] ? vm_normal_page+0x15d/0x3c0 [ 1398.640250][T28343] ? __pte_alloc_kernel+0x210/0x210 [ 1398.645462][T28343] ? do_raw_spin_unlock+0x178/0x270 [ 1398.650664][T28343] do_wp_page+0x543/0x1540 [ 1398.650680][T28343] ? do_raw_spin_lock+0x12a/0x2e0 [ 1398.650694][T28343] ? lock_acquire+0x190/0x410 [ 1398.650708][T28343] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1398.650723][T28343] ? fault_around_bytes_set+0xa0/0xa0 [ 1398.650747][T28343] __handle_mm_fault+0x327b/0x3da0 [ 1398.650767][T28343] ? vm_iomap_memory+0x1a0/0x1a0 [ 1398.650780][T28343] ? handle_mm_fault+0x292/0xa50 [ 1398.650805][T28343] ? handle_mm_fault+0x7a0/0xa50 [ 1398.650823][T28343] ? __kasan_check_read+0x11/0x20 [ 1398.664960][T28343] handle_mm_fault+0x3b2/0xa50 [ 1398.664985][T28343] __do_page_fault+0x536/0xd80 [ 1398.665009][T28343] do_page_fault+0x38/0x590 [ 1398.715236][T28343] page_fault+0x39/0x40 [ 1398.719390][T28343] RIP: 0033:0x40f958 [ 1398.723315][T28343] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf fa 00 4c 00 31 c0 e8 53 25 ff ff 31 ff e8 9c 21 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ee 2c 66 00 [ 1398.742928][T28343] RSP: 002b:0000000000a6fb30 EFLAGS: 00010246 [ 1398.749002][T28343] RAX: 00000000259f096a RBX: 0000000060066a75 RCX: 0000001b32720000 [ 1398.756978][T28343] RDX: 0000000000000000 RSI: 000000000000096a RDI: ffffffff259f096a [ 1398.764951][T28343] RBP: 000000000000000f R08: 00000000259f096a R09: 00000000259f096e 15:19:32 executing program 0: 15:19:32 executing program 0: 15:19:32 executing program 1: [ 1398.772952][T28343] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1398.781512][T28343] R13: 0000000080000000 R14: 00007f4c4248e008 R15: 000000000000000f [ 1398.798471][T28343] memory: usage 307200kB, limit 307200kB, failcnt 6303 [ 1398.825801][T28343] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1398.867816][T28343] Memory cgroup stats for /syz5: [ 1398.867929][T28343] anon 266567680 [ 1398.867929][T28343] file 151552 [ 1398.867929][T28343] kernel_stack 7077888 [ 1398.867929][T28343] slab 12238848 [ 1398.867929][T28343] sock 0 [ 1398.867929][T28343] shmem 65536 [ 1398.867929][T28343] file_mapped 0 [ 1398.867929][T28343] file_dirty 0 [ 1398.867929][T28343] file_writeback 135168 [ 1398.867929][T28343] anon_thp 243269632 [ 1398.867929][T28343] inactive_anon 135168 [ 1398.867929][T28343] active_anon 266649600 [ 1398.867929][T28343] inactive_file 122880 [ 1398.867929][T28343] active_file 45056 [ 1398.867929][T28343] unevictable 0 [ 1398.867929][T28343] slab_reclaimable 1081344 [ 1398.867929][T28343] slab_unreclaimable 11157504 [ 1398.867929][T28343] pgfault 175461 [ 1398.867929][T28343] pgmajfault 0 [ 1398.867929][T28343] workingset_refault 198 [ 1398.867929][T28343] workingset_activate 33 [ 1398.867929][T28343] workingset_nodereclaim 0 [ 1398.867929][T28343] pgrefill 2180 [ 1398.867929][T28343] pgscan 2164 [ 1398.867929][T28343] pgsteal 282 [ 1398.963389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.963451][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.996824][T28343] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20344,uid=0 [ 1399.013060][T28343] Memory cgroup out of memory: Killed process 20344 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1399.040091][ T1118] oom_reaper: reaped process 20344 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1399.078351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.084184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.090075][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:19:33 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc018ae85, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:33 executing program 1: 15:19:33 executing program 0: 15:19:33 executing program 1: 15:19:33 executing program 0: 15:19:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc020660b, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x0, 0x1008000}, 0xfffffffffffffdc3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4000000000000000, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x7, 0x129000) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x27010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x3f, 0x0, 0xff, 0x1, 0x4}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002640), 0x36c, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$vnet(r4, &(0x7f0000001280)={0x1, {&(0x7f0000000180)=""/250, 0xfa, &(0x7f0000000280)=""/4096, 0x1, 0x1}}, 0x68) 15:19:34 executing program 1: 15:19:34 executing program 0: 15:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc020aa00, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:34 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x3f000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:34 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680), 0x35d}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0, 0x209}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$poke(0x4, r3, &(0x7f0000000100), 0x3) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x1}, 0xf) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r4 = socket(0x10, 0x80002, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x20000) sendmmsg$alg(r4, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r6, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8d11aee66d95b55e}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x78, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x10) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/161, 0xa1) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:34 executing program 0: 15:19:34 executing program 1: 15:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc028ae92, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:34 executing program 0: 15:19:34 executing program 1: 15:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc02c5638, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'team_slave_1\x00', 0x3}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x6, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000180)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x0, 0x4}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:34 executing program 0: 15:19:34 executing program 1: 15:19:35 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x40000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:35 executing program 0: 15:19:35 executing program 1: 15:19:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc040563e, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:35 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffec4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:35 executing program 0: 15:19:35 executing program 1: 15:19:35 executing program 0: 15:19:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc048ae65, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:35 executing program 1: 15:19:35 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000)=0x101, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1402.018759][T28502] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1402.031979][T28502] CPU: 1 PID: 28502 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1402.040668][T28502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.050724][T28502] Call Trace: [ 1402.054017][T28502] dump_stack+0x197/0x210 [ 1402.058379][T28502] dump_header+0x10b/0x82d [ 1402.062806][T28502] oom_kill_process.cold+0x10/0x15 [ 1402.067907][T28502] out_of_memory+0x334/0x13c0 [ 1402.072931][T28502] ? find_held_lock+0x35/0x130 [ 1402.077807][T28502] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1402.083610][T28502] ? oom_killer_disable+0x280/0x280 [ 1402.088818][T28502] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1402.094377][T28502] ? memcg_oom_wake_function+0x700/0x700 [ 1402.100021][T28502] ? do_raw_spin_unlock+0x178/0x270 [ 1402.105213][T28502] ? _raw_spin_unlock+0x28/0x40 [ 1402.110065][T28502] try_charge+0xf76/0x14d0 [ 1402.114476][T28502] ? find_held_lock+0x35/0x130 [ 1402.119248][T28502] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1402.124878][T28502] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1402.130598][T28502] ? find_held_lock+0x35/0x130 [ 1402.135358][T28502] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1402.140916][T28502] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1402.146471][T28502] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1402.151851][T28502] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1402.157393][T28502] __memcg_kmem_charge+0x13a/0x3a0 [ 1402.162499][T28502] __alloc_pages_nodemask+0x4f5/0x910 [ 1402.167873][T28502] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1402.173330][T28502] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1402.178797][T28502] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1402.184582][T28502] ? copy_page_range+0x10b2/0x20b0 [ 1402.189696][T28502] ? copy_page_range+0x10b2/0x20b0 [ 1402.194811][T28502] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1402.201052][T28502] alloc_pages_current+0x107/0x210 [ 1402.206173][T28502] pte_alloc_one+0x1b/0x1a0 [ 1402.210686][T28502] __pte_alloc+0x20/0x310 [ 1402.215029][T28502] copy_page_range+0x1616/0x20b0 [ 1402.219980][T28502] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1402.225512][T28502] ? __rb_insert_augmented+0x20c/0xd90 [ 1402.230967][T28502] ? validate_mm_rb+0xa3/0xc0 [ 1402.235699][T28502] ? __vma_link_rb+0x5ad/0x770 [ 1402.240475][T28502] dup_mm+0xa67/0x1430 [ 1402.244562][T28502] ? vm_area_dup+0x170/0x170 [ 1402.249155][T28502] ? debug_mutex_init+0x2d/0x60 [ 1402.254016][T28502] copy_process+0x2ad6/0x7230 [ 1402.258695][T28502] ? __kasan_check_read+0x11/0x20 [ 1402.263746][T28502] ? mark_lock+0xc2/0x1220 [ 1402.268204][T28502] ? __cleanup_sighand+0xc0/0xc0 [ 1402.273147][T28502] ? __might_fault+0x12b/0x1e0 [ 1402.277921][T28502] ? __might_fault+0x12b/0x1e0 [ 1402.282703][T28502] _do_fork+0x146/0x1090 [ 1402.286972][T28502] ? copy_init_mm+0x20/0x20 [ 1402.291487][T28502] ? __kasan_check_read+0x11/0x20 [ 1402.296518][T28502] ? _copy_to_user+0x118/0x160 [ 1402.301302][T28502] __x64_sys_clone+0x19a/0x260 [ 1402.306078][T28502] ? __ia32_sys_vfork+0xd0/0xd0 [ 1402.310940][T28502] ? lockdep_hardirqs_on+0x421/0x5e0 15:19:36 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:36 executing program 0: 15:19:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0585604, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:36 executing program 1: 15:19:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x5, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1402.316222][T28502] ? trace_hardirqs_on+0x67/0x240 [ 1402.316242][T28502] do_syscall_64+0xfa/0x790 [ 1402.316264][T28502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1402.331650][T28502] RIP: 0033:0x45a909 [ 1402.335550][T28502] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1402.355165][T28502] RSP: 002b:00007f4c4048cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1402.363588][T28502] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a909 [ 1402.371571][T28502] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1402.379555][T28502] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1402.387562][T28502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1402.395542][T28502] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1402.424590][T28502] memory: usage 307200kB, limit 307200kB, failcnt 6343 15:19:36 executing program 1: 15:19:36 executing program 0: [ 1402.472281][T28502] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1402.515415][T28502] Memory cgroup stats for /syz5: [ 1402.516564][T28502] anon 265142272 [ 1402.516564][T28502] file 151552 [ 1402.516564][T28502] kernel_stack 7372800 [ 1402.516564][T28502] slab 12378112 [ 1402.516564][T28502] sock 0 [ 1402.516564][T28502] shmem 65536 [ 1402.516564][T28502] file_mapped 0 [ 1402.516564][T28502] file_dirty 0 [ 1402.516564][T28502] file_writeback 135168 [ 1402.516564][T28502] anon_thp 241172480 [ 1402.516564][T28502] inactive_anon 135168 [ 1402.516564][T28502] active_anon 265093120 15:19:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc080aebe, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) [ 1402.516564][T28502] inactive_file 122880 [ 1402.516564][T28502] active_file 45056 [ 1402.516564][T28502] unevictable 0 [ 1402.516564][T28502] slab_reclaimable 1081344 [ 1402.516564][T28502] slab_unreclaimable 11296768 [ 1402.516564][T28502] pgfault 175923 [ 1402.516564][T28502] pgmajfault 0 [ 1402.516564][T28502] workingset_refault 198 [ 1402.516564][T28502] workingset_activate 33 [ 1402.516564][T28502] workingset_nodereclaim 0 [ 1402.516564][T28502] pgrefill 2180 [ 1402.516564][T28502] pgscan 2164 [ 1402.516564][T28502] pgsteal 282 15:19:36 executing program 1: 15:19:36 executing program 0: [ 1402.719582][T28502] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20293,uid=0 15:19:36 executing program 1: [ 1402.946946][T28502] Memory cgroup out of memory: Killed process 20293 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34940kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1402.991379][ T1118] oom_reaper: reaped process 20293 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 15:19:37 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x1}, 0x10) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1403.078289][ C0] net_ratelimit: 17 callbacks suppressed [ 1403.078298][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.089875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.150942][T28551] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1403.171199][T28551] CPU: 1 PID: 28551 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1403.180343][T28551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.190410][T28551] Call Trace: [ 1403.193718][T28551] dump_stack+0x197/0x210 [ 1403.198060][T28551] dump_header+0x10b/0x82d [ 1403.202478][T28551] ? oom_kill_process+0x94/0x420 [ 1403.207421][T28551] oom_kill_process.cold+0x10/0x15 [ 1403.212537][T28551] out_of_memory+0x334/0x13c0 [ 1403.217213][T28551] ? find_held_lock+0x35/0x130 [ 1403.221985][T28551] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1403.227800][T28551] ? oom_killer_disable+0x280/0x280 [ 1403.233026][T28551] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1403.238586][T28551] ? memcg_oom_wake_function+0x700/0x700 [ 1403.244235][T28551] ? do_raw_spin_unlock+0x178/0x270 [ 1403.249432][T28551] ? _raw_spin_unlock+0x28/0x40 [ 1403.254488][T28551] try_charge+0xf76/0x14d0 [ 1403.258896][T28551] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1403.264472][T28551] ? percpu_ref_tryget+0x102/0x230 [ 1403.269573][T28551] ? rcu_read_lock_held+0x9c/0xb0 [ 1403.274612][T28551] ? __kasan_check_read+0x11/0x20 [ 1403.279634][T28551] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1403.285191][T28551] mem_cgroup_try_charge+0x136/0x590 [ 1403.290487][T28551] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1403.296125][T28551] wp_page_copy+0x407/0x1560 15:19:37 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0x1, 0x1, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0x9, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000200)={&(0x7f00000001c0)=""/33, 0x21}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f0000000100)={0x5a1a, 0x80000001, 0x2c8, 0x2, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$nbd(r6, &(0x7f0000000340)={0x67446698, 0x0, 0x2, 0x4, 0x4, "826f9ac2704c7a3b8ceb542dfdb9447b2b1d3fd67fb2ba1253bc115eecaa9fd172359e1ee4599685021928db5ba644f033bcd3066c0643a5b7351093afb7dbd915438b670dfffd9ea73f80145ef472c7f17f6d0615d759d44009a67fa101ed19d44bb368a2ca49aa24b2a0d20defb27fb47b06767683da5eb2d67e1c8980faeb80eecca9c32c105d00433d0e474209fcb39fd37ac9d9d6f34679c1de338cc403a45df96aa598195e34fb"}, 0xba) 15:19:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x0, 0x5, [], [0xc1]}) 15:19:37 executing program 0: 15:19:37 executing program 1: [ 1403.300716][T28551] ? find_held_lock+0x35/0x130 [ 1403.305478][T28551] ? follow_pfn+0x2a0/0x2a0 [ 1403.309973][T28551] ? lock_downgrade+0x920/0x920 [ 1403.314831][T28551] ? swp_swapcount+0x540/0x540 [ 1403.319594][T28551] ? do_raw_spin_unlock+0x178/0x270 [ 1403.319612][T28551] do_wp_page+0x543/0x1540 [ 1403.319631][T28551] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1403.319654][T28551] __handle_mm_fault+0x327b/0x3da0 [ 1403.319675][T28551] ? vm_iomap_memory+0x1a0/0x1a0 [ 1403.319688][T28551] ? handle_mm_fault+0x292/0xa50 15:19:37 executing program 1: [ 1403.319711][T28551] ? handle_mm_fault+0x7a0/0xa50 [ 1403.354527][T28551] ? __kasan_check_read+0x11/0x20 [ 1403.359572][T28551] handle_mm_fault+0x3b2/0xa50 [ 1403.364349][T28551] __do_page_fault+0x536/0xd80 [ 1403.369164][T28551] do_page_fault+0x38/0x590 [ 1403.373678][T28551] page_fault+0x39/0x40 [ 1403.377834][T28551] RIP: 0033:0x40db00 [ 1403.381734][T28551] Code: 3d 7f 4b 66 00 00 0f 84 c0 06 00 00 83 c3 2d 80 3d 7e 4b 66 00 00 48 63 eb 74 0f 81 fb e7 03 00 00 b8 e8 03 00 00 48 0f 4e e8 7b 4b ff ff bb e8 03 00 00 49 89 c5 4c 8d 74 05 00 eb 10 e8 67 [ 1403.401342][T28551] RSP: 002b:0000000000a6fc00 EFLAGS: 00010246 [ 1403.407425][T28551] RAX: 0000000000000001 RBX: 000000000000002d RCX: 000000000045a909 [ 1403.407434][T28551] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000075bf28 [ 1403.407442][T28551] RBP: 000000000000002d R08: 00000000007610c0 R09: ffffffffffffffff [ 1403.407450][T28551] R10: 0000000000a6fcc0 R11: 0000000000000246 R12: 000000000075bf20 [ 1403.407462][T28551] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1403.439680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.453211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.459140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.464896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.474186][T28551] memory: usage 307200kB, limit 307200kB, failcnt 6394 [ 1403.486600][T28551] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1403.494890][T28551] Memory cgroup stats for /syz5: [ 1403.495097][T28551] anon 265166848 [ 1403.495097][T28551] file 151552 [ 1403.495097][T28551] kernel_stack 7372800 [ 1403.495097][T28551] slab 12378112 [ 1403.495097][T28551] sock 0 [ 1403.495097][T28551] shmem 65536 [ 1403.495097][T28551] file_mapped 0 [ 1403.495097][T28551] file_dirty 0 [ 1403.495097][T28551] file_writeback 135168 [ 1403.495097][T28551] anon_thp 241172480 [ 1403.495097][T28551] inactive_anon 135168 [ 1403.495097][T28551] active_anon 265252864 [ 1403.495097][T28551] inactive_file 122880 [ 1403.495097][T28551] active_file 45056 [ 1403.495097][T28551] unevictable 0 [ 1403.495097][T28551] slab_reclaimable 1081344 [ 1403.495097][T28551] slab_unreclaimable 11296768 [ 1403.495097][T28551] pgfault 175989 [ 1403.495097][T28551] pgmajfault 0 [ 1403.495097][T28551] workingset_refault 198 [ 1403.495097][T28551] workingset_activate 33 [ 1403.495097][T28551] workingset_nodereclaim 0 [ 1403.495097][T28551] pgrefill 2180 [ 1403.495097][T28551] pgscan 2164 [ 1403.495097][T28551] pgsteal 282 15:19:37 executing program 0: 15:19:37 executing program 1: [ 1403.608770][T28569] bond0: (slave bond_slave_1): Releasing backup interface [ 1403.692604][T28551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20231,uid=0 15:19:37 executing program 0: 15:19:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x2, 0x5, [], [0xc1]}) [ 1403.752573][T28551] Memory cgroup out of memory: Killed process 20231 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:37 executing program 1: [ 1403.907996][T28554] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1403.934280][T28554] CPU: 0 PID: 28554 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1403.943012][T28554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.953061][T28554] Call Trace: [ 1403.953086][T28554] dump_stack+0x197/0x210 [ 1403.953107][T28554] dump_header+0x10b/0x82d [ 1403.953118][T28554] ? oom_kill_process+0x94/0x420 [ 1403.953135][T28554] oom_kill_process.cold+0x10/0x15 [ 1403.965145][T28554] out_of_memory+0x334/0x13c0 [ 1403.965168][T28554] ? oom_killer_disable+0x280/0x280 [ 1403.985457][T28554] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1403.991092][T28554] ? memcg_oom_wake_function+0x700/0x700 [ 1403.996746][T28554] ? do_raw_spin_unlock+0x178/0x270 [ 1404.001956][T28554] ? _raw_spin_unlock+0x28/0x40 [ 1404.006812][T28554] try_charge+0xa54/0x14d0 [ 1404.011240][T28554] ? find_held_lock+0x35/0x130 [ 1404.016018][T28554] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1404.021552][T28554] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1404.027090][T28554] ? find_held_lock+0x35/0x130 [ 1404.032099][T28554] ? get_mem_cgroup_from_mm+0x139/0x310 [ 1404.037639][T28554] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1404.043171][T28554] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 1404.048532][T28554] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1404.054067][T28554] __memcg_kmem_charge+0x13a/0x3a0 [ 1404.059254][T28554] __alloc_pages_nodemask+0x4f5/0x910 [ 1404.064612][T28554] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1404.070318][T28554] ? mark_lock+0xc2/0x1220 [ 1404.074729][T28554] ? __lock_acquire+0x8a0/0x4a00 [ 1404.079670][T28554] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1404.085904][T28554] alloc_pages_current+0x107/0x210 [ 1404.091005][T28554] pte_alloc_one+0x1b/0x1a0 [ 1404.095509][T28554] __handle_mm_fault+0x2e6b/0x3da0 [ 1404.100610][T28554] ? vm_iomap_memory+0x1a0/0x1a0 [ 1404.105528][T28554] ? handle_mm_fault+0x292/0xa50 [ 1404.110458][T28554] ? handle_mm_fault+0x7a0/0xa50 [ 1404.115383][T28554] ? __kasan_check_read+0x11/0x20 [ 1404.120395][T28554] handle_mm_fault+0x3b2/0xa50 [ 1404.125148][T28554] __do_page_fault+0x536/0xd80 [ 1404.129910][T28554] ? page_fault+0x16/0x40 [ 1404.134239][T28554] do_page_fault+0x38/0x590 [ 1404.138730][T28554] page_fault+0x39/0x40 [ 1404.142876][T28554] RIP: 0033:0x45a909 [ 1404.146764][T28554] Code: Bad RIP value. [ 1404.150810][T28554] RSP: 002b:00007f4c4048cc78 EFLAGS: 00010246 [ 1404.156859][T28554] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000045a909 [ 1404.164815][T28554] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.172866][T28554] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1404.180827][T28554] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1404.188786][T28554] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1404.201430][T28562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.221167][T28554] memory: usage 304880kB, limit 307200kB, failcnt 6394 [ 1404.228148][T28554] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1404.252150][T28569] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1404.253949][T28554] Memory cgroup stats for /syz5: [ 1404.254456][T28554] anon 263028736 [ 1404.254456][T28554] file 151552 [ 1404.254456][T28554] kernel_stack 7372800 [ 1404.254456][T28554] slab 12378112 [ 1404.254456][T28554] sock 0 [ 1404.254456][T28554] shmem 65536 [ 1404.254456][T28554] file_mapped 0 [ 1404.254456][T28554] file_dirty 0 [ 1404.254456][T28554] file_writeback 135168 [ 1404.254456][T28554] anon_thp 239075328 [ 1404.254456][T28554] inactive_anon 135168 [ 1404.254456][T28554] active_anon 263114752 [ 1404.254456][T28554] inactive_file 122880 [ 1404.254456][T28554] active_file 45056 [ 1404.254456][T28554] unevictable 0 [ 1404.254456][T28554] slab_reclaimable 1081344 [ 1404.254456][T28554] slab_unreclaimable 11296768 [ 1404.254456][T28554] pgfault 175989 [ 1404.254456][T28554] pgmajfault 0 [ 1404.254456][T28554] workingset_refault 198 [ 1404.254456][T28554] workingset_activate 33 [ 1404.254456][T28554] workingset_nodereclaim 0 [ 1404.254456][T28554] pgrefill 2180 [ 1404.254456][T28554] pgscan 2164 [ 1404.254456][T28554] pgsteal 282 [ 1404.365796][T28554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19927,uid=0 [ 1404.397272][T28554] Memory cgroup out of memory: Killed process 19927 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1404.424952][ T1118] oom_reaper: reaped process 19927 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1404.438338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.444136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.447184][T28553] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1404.495058][T28553] CPU: 0 PID: 28553 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 1404.503783][T28553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.513843][T28553] Call Trace: [ 1404.517151][T28553] dump_stack+0x197/0x210 [ 1404.521501][T28553] dump_header+0x10b/0x82d [ 1404.525935][T28553] oom_kill_process.cold+0x10/0x15 [ 1404.531061][T28553] out_of_memory+0x334/0x13c0 [ 1404.535751][T28553] ? retint_kernel+0x2b/0x2b [ 1404.540348][T28553] ? oom_killer_disable+0x280/0x280 [ 1404.545560][T28553] ? mem_cgroup_out_of_memory+0x16a/0x240 [ 1404.551296][T28553] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1404.556853][T28553] ? memcg_oom_wake_function+0x700/0x700 [ 1404.562508][T28553] ? do_raw_spin_unlock+0x178/0x270 [ 1404.567722][T28553] ? _raw_spin_unlock+0x28/0x40 [ 1404.572591][T28553] try_charge+0xa54/0x14d0 [ 1404.577029][T28553] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1404.582579][T28553] ? percpu_ref_tryget+0x102/0x230 [ 1404.587696][T28553] ? rcu_read_lock_held+0x9c/0xb0 [ 1404.592740][T28553] ? __kasan_check_read+0x11/0x20 [ 1404.597758][T28553] ? get_mem_cgroup_from_mm+0x151/0x310 [ 1404.603288][T28553] mem_cgroup_try_charge+0x136/0x590 [ 1404.608568][T28553] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1404.614182][T28553] wp_page_copy+0x407/0x1560 [ 1404.618754][T28553] ? find_held_lock+0x35/0x130 [ 1404.623530][T28553] ? follow_pfn+0x2a0/0x2a0 [ 1404.628026][T28553] ? lock_downgrade+0x920/0x920 [ 1404.632861][T28553] ? swp_swapcount+0x540/0x540 [ 1404.637608][T28553] ? do_raw_spin_unlock+0x178/0x270 [ 1404.642786][T28553] do_wp_page+0x543/0x1540 [ 1404.647187][T28553] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1404.652545][T28553] __handle_mm_fault+0x327b/0x3da0 [ 1404.657642][T28553] ? vm_iomap_memory+0x1a0/0x1a0 [ 1404.662559][T28553] ? handle_mm_fault+0x292/0xa50 [ 1404.667510][T28553] ? __kasan_check_read+0x11/0x20 [ 1404.672519][T28553] handle_mm_fault+0x3b2/0xa50 [ 1404.677272][T28553] __do_page_fault+0x536/0xd80 [ 1404.682022][T28553] do_page_fault+0x38/0x590 [ 1404.686508][T28553] page_fault+0x39/0x40 [ 1404.690643][T28553] RIP: 0033:0x404314 [ 1404.694606][T28553] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d6 00 00 00 85 c0 0f 85 ce 00 00 00 [ 1404.714195][T28553] RSP: 002b:00007f4c4048cc90 EFLAGS: 00010213 [ 1404.720246][T28553] RAX: 0000000000000000 RBX: 0000000000001c0d RCX: 000000000045a909 [ 1404.728251][T28553] RDX: 00000000004042cc RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.736306][T28553] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1404.744279][T28553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4048d6d4 [ 1404.752445][T28553] R13: 00000000004c1007 R14: 00000000004d4c88 R15: 00000000ffffffff [ 1404.762491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.769329][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.779874][T28553] memory: usage 302704kB, limit 307200kB, failcnt 6394 [ 1404.786771][T28553] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1404.794470][T28553] Memory cgroup stats for /syz5: [ 1404.794669][T28553] anon 260816896 [ 1404.794669][T28553] file 151552 [ 1404.794669][T28553] kernel_stack 7335936 [ 1404.794669][T28553] slab 12378112 [ 1404.794669][T28553] sock 0 [ 1404.794669][T28553] shmem 65536 [ 1404.794669][T28553] file_mapped 0 [ 1404.794669][T28553] file_dirty 0 [ 1404.794669][T28553] file_writeback 135168 [ 1404.794669][T28553] anon_thp 236978176 [ 1404.794669][T28553] inactive_anon 135168 [ 1404.794669][T28553] active_anon 260902912 [ 1404.794669][T28553] inactive_file 122880 [ 1404.794669][T28553] active_file 45056 [ 1404.794669][T28553] unevictable 0 [ 1404.794669][T28553] slab_reclaimable 1081344 [ 1404.794669][T28553] slab_unreclaimable 11296768 [ 1404.794669][T28553] pgfault 175989 [ 1404.794669][T28553] pgmajfault 0 [ 1404.794669][T28553] workingset_refault 198 [ 1404.794669][T28553] workingset_activate 33 [ 1404.794669][T28553] workingset_nodereclaim 0 [ 1404.794669][T28553] pgrefill 2180 [ 1404.794669][T28553] pgscan 2164 [ 1404.794669][T28553] pgsteal 282 [ 1404.890788][T28553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19873,uid=0 [ 1404.906698][T28553] Memory cgroup out of memory: Killed process 19873 (syz-executor.5) total-vm:72716kB, anon-rss:2220kB, file-rss:34812kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 15:19:39 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:39 executing program 0: 15:19:39 executing program 1: 15:19:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x3, 0x5, [], [0xc1]}) 15:19:39 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x2000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:39 executing program 1: 15:19:39 executing program 0: 15:19:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x4, 0x5, [], [0xc1]}) 15:19:39 executing program 0: 15:19:39 executing program 1: 15:19:39 executing program 1: 15:19:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x5, 0x5, [], [0xc1]}) 15:19:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCSIG(r3, 0x40045436, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x40, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 15:19:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) recvmmsg(r8, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000100)=""/67, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {&(0x7f0000000780)=""/143, 0xfffffffffffffed1}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}, {&(0x7f0000001a80)=""/158, 0xfffffffffffffd62}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x80}, {r1, 0x1}, {r5, 0x8}, {r6, 0x10}, {r2, 0x22}, {r7, 0x4080}, {r10, 0x281}], 0x7, 0x5) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x8) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000003c0)=""/239) [ 1405.865319][T28648] bond0: (slave bond_slave_1): Releasing backup interface 15:19:40 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x3f00) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = dup(0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 15:19:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x6, 0x5, [], [0xc1]}) 15:19:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x101, 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000001c0)={0x0, 0x1, 'client0\x00', 0xffffffff80000003, "66ba3726ef1eb58e", "de130cf2c153eb6bf79eca7d4690a7aa5691b0eed0446322da0550d66b8331f7", 0x5}) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x6, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) recvmsg$can_raw(r5, &(0x7f0000000740)={&(0x7f00000003c0)=@caif=@dbg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/38, 0x26}], 0x4, &(0x7f0000000640)=""/207, 0xcf}, 0x40010020) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x240c1) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x42800, 0x0) r7 = socket$kcm(0x29, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000380)={0x1, 0x3, 0x4, 0x6, 0x2, 0xbed8}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x800, 0x0) accept4$inet(r8, &(0x7f00000007c0)={0x2, 0x0, @empty}, &(0x7f0000000800)=0x10, 0xc00) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000280)="95516ff1df6c9f77ab6e9d37bdbdad5dc57c4746e95d1693decc25b89fea565337a8a6a2fd263000254ae70f730d1e2abcee5a3aecd3e1a987981007c1233666b922d6e031aaa12512de70f40addf0c7a1f49e03616962b7cd6fd157867e63d2259aed6b9dcc636d88035925e32e56315a056a310451b86bb844bb2bca127ce8b87c16eeffdbc597d5e0b7df1f30202f9f013561fe4c7facd0cc8544f5cb0587dfc8caa2c5b02dcb4de7583779c5f66fc231a3146529555246cd6b52ec585faaf032f24437456c44", 0xc8) 15:19:40 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:19:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x7, 0x5, [], [0xc1]}) 15:19:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 15:19:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x509042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x8, 0x5, [], [0xc1]}) 15:19:40 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x3) getpeername(r0, 0x0, 0x0) 15:19:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000c80)={0x6, 'batadv0\x00', {0x2}, 0x400}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000d00)={0xc1fa04b8baf2c696, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = fcntl$dupfd(r6, 0x406, r1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(r8, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000002c0)=@newqdisc={0x8f0, 0x24, 0x72f579fe06699193, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x2, 0xfd418edbb5422c96}, {0x1, 0xffe0}, {0x4, 0x3b3728c095990602}}, [@TCA_STAB={0x80, 0x8, [{{0x1c, 0x1, {0x9, 0x9, 0x0, 0x60e, 0x2, 0x7, 0x0, 0x2}}, {0x8, 0x2, [0xfc01, 0xeb49]}}, {{0x1c, 0x1, {0x1, 0x7, 0x22a0, 0x9, 0x2, 0x3, 0x4, 0x5}}, {0x10, 0x2, [0x80, 0x7, 0x30, 0x7f, 0x3ff]}}, {{0x1c, 0x1, {0x80, 0x6, 0x0, 0x2, 0x0, 0x7f, 0x3, 0x6}}, {0x10, 0x2, [0x3, 0x4321, 0x7, 0x3a, 0x7, 0x20]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd1e}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x834, 0x2, [@TCA_TBF_PARMS={0x10, 0x1, @limit=0x400}, @TCA_TBF_RATE64={0xc, 0x4, 0x740a8a2c5d72793}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200, 0x3, 0x800, 0x60000000, 0x3f, 0x3f, 0x7, 0x9, 0x9, 0x2, 0x7, 0x4, 0xffffffff, 0xfffff000, 0x1, 0x7fffffff, 0x80000001, 0x10000, 0x8, 0x4, 0xfffffffd, 0x2, 0x81, 0x20, 0x7, 0x1, 0x7f, 0xd9a, 0x1, 0x4, 0x100, 0x4, 0x10000, 0x8000, 0x675, 0x6, 0x9, 0x1, 0x2e, 0x4, 0x8, 0x8, 0x101, 0x1, 0x2c3d, 0x0, 0x8000, 0x3, 0x8, 0x7f, 0xbd, 0x2, 0x5, 0x5, 0xfffffff9, 0xfff, 0x7, 0x8, 0x1, 0x3, 0x8, 0xfffffffb, 0x8, 0x2, 0x9, 0x3f, 0xccba, 0x8, 0x8, 0x7fff, 0x3, 0xd95, 0x1, 0x8, 0x100, 0x8, 0x7, 0x5, 0x8, 0x5, 0x100, 0x31, 0x1, 0x5, 0x4, 0x4, 0x6, 0x8, 0x8a5, 0x5, 0x6, 0x0, 0x80000001, 0x64ad, 0x4, 0x45b, 0x1, 0x3, 0x5, 0x10001, 0xc71, 0xa, 0x81, 0x5, 0x1, 0x3, 0xc2d, 0x9, 0x40, 0x63, 0x40, 0x6, 0x3, 0x1000, 0x8, 0xff, 0x92, 0x3, 0x800, 0x400, 0x101, 0x401, 0x80000000, 0x60, 0x8001, 0x0, 0x1, 0x8, 0x9, 0x9, 0x1468, 0x3ff, 0x101, 0x1, 0x2, 0x7, 0xfffffffc, 0x9, 0x4, 0x580c, 0xfff, 0xfff, 0x9, 0x6, 0x8, 0x9, 0x401, 0x4, 0xfffffff8, 0x40, 0x7fffffff, 0x401, 0x1f, 0x7, 0x69, 0xe6, 0x56b9, 0x6, 0x2, 0x401, 0x8, 0x1, 0x3ff, 0x3ff, 0x6, 0x1ff, 0x7, 0x2, 0x8, 0x4, 0x80, 0xa0d8, 0x7, 0x401, 0xfffffffa, 0x90000000, 0x8, 0x7ff, 0x80, 0x8, 0x3f, 0xb3, 0x100, 0xb8c, 0x80000000, 0x3, 0x2, 0x1f, 0x40, 0x1ff, 0x1f, 0x8, 0x2, 0x3ff, 0x2, 0x3, 0x5, 0x400, 0x5, 0x5, 0x1, 0x2, 0xc0, 0x0, 0x80000000, 0x8ae9, 0xfffffeff, 0x97af, 0x1, 0x1, 0x1, 0x6, 0x3, 0x1, 0x8, 0x8d2b, 0x4, 0x3, 0x0, 0x1, 0x8, 0x7, 0x8, 0x0, 0x5, 0x80, 0x3, 0x7, 0x61f, 0x4, 0x2, 0x1, 0x1, 0x3f, 0x8, 0x2, 0x5, 0xff, 0x35a, 0x7, 0xffff, 0x8001, 0xc727, 0x1, 0x2, 0x5, 0x100, 0x2, 0xfffffc47, 0x4, 0x100, 0x5, 0x5, 0x8, 0xffffffff]}, @TCA_TBF_RATE64={0xc, 0x4, 0x3729cb0821a61716}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x6, 0x6, 0x6, 0x7, 0xfffffff8, 0x1, 0x200, 0x7, 0x7, 0x0, 0xffffb710, 0x75, 0x8000, 0x23, 0x8000, 0x100, 0x0, 0x2, 0x2, 0x7, 0x5, 0x0, 0x7, 0x3, 0x8, 0x2, 0x1, 0x7, 0x0, 0x9, 0x2, 0x2, 0x7f, 0x5, 0x4, 0x0, 0x9, 0x3, 0x8, 0x7, 0x0, 0x3, 0xfffffc01, 0x7, 0x8, 0x7f, 0x0, 0x3, 0x1, 0x1, 0x5c02, 0x1, 0x424, 0x20, 0x0, 0xfffffff7, 0x209efc80, 0x8, 0x5, 0x8, 0x10001, 0x80000000, 0x20, 0x200, 0x1ff, 0x8, 0x8, 0x0, 0xfffffffa, 0x8000, 0x1, 0x90d, 0x6, 0x1000, 0x730d5626, 0x4, 0x5, 0x5, 0x7, 0x8, 0x2, 0x6, 0x12c06b6d, 0x40, 0x9, 0x0, 0x34b0, 0x449, 0x8, 0x2, 0x3, 0x0, 0xd17c, 0x401, 0x401, 0x4, 0xa833, 0x1000, 0x5f6b, 0x8, 0x9, 0x1, 0x8e, 0x800, 0x1ff, 0x3, 0x8000, 0x8, 0x7, 0x9, 0x1, 0x7, 0x7, 0x1, 0xe95, 0x0, 0x7, 0x1, 0x1f, 0x8, 0x7fff, 0xfda5, 0x6, 0x3, 0x2, 0x3, 0x3, 0xfffff001, 0x5, 0x481, 0xfffffff9, 0xfff, 0x0, 0x1, 0x825b, 0xfff, 0x2, 0xfff, 0x1ff, 0x63, 0x7, 0xfffffff7, 0x200, 0x0, 0x10000, 0x20, 0x1536, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x6, 0xffffffff, 0x0, 0x1e, 0x9, 0x7, 0x2, 0x6, 0x6, 0x5, 0xbeb1, 0x4d63, 0x1000, 0xe9, 0x2, 0x4, 0x8, 0xa89b, 0x2, 0x20, 0x4, 0x8000, 0xbf7c, 0x6, 0x1, 0x100, 0x1, 0x343, 0x0, 0xfff, 0x8, 0x7, 0x3ff, 0xfffff100, 0x7, 0xfffffffc, 0xe041, 0x81, 0x1ff, 0x7, 0x81, 0x10000, 0x2, 0xfffffffe, 0x5, 0x5, 0xfffff613, 0x1e, 0x5, 0x20, 0x9, 0xfffffffc, 0xfff, 0x7, 0x4, 0x3, 0x101, 0x7fff, 0x5, 0x7fffffff, 0x7, 0x7, 0x5, 0x1000, 0x4, 0x8, 0x8, 0x8, 0xffff, 0x7fffffff, 0xfffffffc, 0x2, 0x7f, 0x42, 0x7fffffff, 0x3, 0xcd, 0x7428, 0x6, 0xdf, 0x5, 0x80000000, 0x3, 0x8, 0x8, 0x8, 0x1ff, 0x200, 0x6, 0x3, 0x10e00, 0x5, 0x3, 0x8, 0x2, 0x800, 0xffffffc1, 0x4, 0x7, 0x2d6, 0x20, 0x81, 0xfffff801, 0x401]}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x40000}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1407.609080][T28655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.630426][T28660] bond0: (slave bond_slave_1): Releasing backup interface 15:19:42 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x590, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x449, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:42 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1408.125257][T28719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:19:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x300, 0x5, [], [0xc1]}) 15:19:42 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:42 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x4000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0xf000000, 0x9, 0x9, [], &(0x7f0000000100)={0x990a79, 0x2, [], @p_u16=0xfffffffffffffffd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x500, 0x5, [], [0xc1]}) [ 1408.599161][ C1] net_ratelimit: 18 callbacks suppressed [ 1408.599185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.611278][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:19:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="6b9ead40c3b54a0fdc1f4a55166e209d7b9c6364b2db4cbbb71e15eace350807a85ac01d60a5755c698adea6352fe50a1adda9349cba5eaa4b9ec05b37f8778a0446a5f18e80f029fadc2167bfa20a4510c82081ef392b7d21a42c39cd91fec1ba83eb564b655ea86000e08942115bff49833077239cc1fdff3d0fc55f156fe66a0d0e6843170633d4b7a0825ade5aad014a2eb45adf047f0e9e84fdfa58d466ea190eced1e743a4", 0xa8}, 0x68) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000480)='/dev/vcsu#\x00', 0x100000001, 0x10800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x8, @loopback, 0x9}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x40, @loopback, 0x8001}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x25}, 0x4}, @in6={0xa, 0x4e20, 0x7, @local, 0xc2c0}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x4, @remote, 0x3}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x7ff, @ipv4={[], [], @multicast2}, 0x2}, @in6={0xa, 0x4e24, 0x7, @remote, 0x4c}], 0x100) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = accept$inet(r3, &(0x7f0000000440)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x22, 0x80, 0xffffffff, 0x6, 0x8, 0x2, 0x9, 0x119, 0xfff, 0x2, 0xfffffffffffffffe, 0x2, 0x100000000, 0x20, 0xf800000000]}, &(0x7f0000000600)=0x100) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r11 = syz_open_dev$vcsn(&(0x7f0000000680)='/dev/vcs#\x00', 0x80, 0x400100) write$FUSE_LSEEK(r11, &(0x7f00000006c0)={0x18, 0x0, 0x1, {0x4}}, 0x18) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r10, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x54, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8467}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r12, 0x5600, &(0x7f0000000740)) 15:19:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x600, 0x5, [], [0xc1]}) 15:19:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/49) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fallocate(r3, 0x8, 0x4, 0x99f) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x480000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) sendmsg$can_j1939(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r7, 0x3, {0x4, 0x1}}, 0x18, &(0x7f0000000340)={&(0x7f0000000280)="895d3ed81493ffefe52a9941d836011f32edd68d9e17dc17aebddb72e7352011f0dd9768300e0b40feb5e06a5efd7bc39203ac70a38d0e6004c032b151d66cd521f631679aa78dfa121072ba96c1569c1216baf65ddd1f96b5e79af2cb71cbc4e55f785d1fdbe741b96421028c9754e3d30e29fc779dfd44e575c5414a8b6b40532d2d3b0d11d25fc66f7aaefad3e92cf62ed0d9", 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x2) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000400)={0x9, 0x5, {0x56, 0x0, 0xff, {0x5}, {0x55, 0x9f}, @rumble={0x5}}, {0x54, 0x5, 0x8, {0x2, 0x1000}, {0x7, 0x40}, @period={0x59, 0x4fe2, 0x5, 0x8, 0x6b9, {0x927c, 0x9, 0xfff7, 0x4}, 0x6, &(0x7f00000003c0)=[0x3, 0x80, 0x8, 0x1, 0x2, 0xbf1]}}}) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000180)) socket$pppoe(0x18, 0x1, 0x0) 15:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x700, 0x5, [], [0xc1]}) [ 1408.918414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.929500][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1408.935326][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)='/dev/kvm\x00'}, 0x30) ptrace$setregset(0x4205, r2, 0x6, &(0x7f00000002c0)={&(0x7f00000001c0)="0fb59984e779307dc94a82755fb4539dabef2875d0872033dab1eb671fe4852ce7188cb8f25579d22b759d4a5274858130c9ab45bd816b9bae36962ac740834e95a8606b567089fbaf2e94ffa6a00eb1fa9fef5834752bfd2d107bd1881124d0b5938a3d8ef414ee717a0ab345bbdc106f2920ce277d639a245d61a9906474d821395cb75b1e08f947c20a19c9a9a45f228951b5d80919a2dac33e139d1581a069316692c67d5e8d2407027757d62caa82f309eca3fab16745b36b468cac92a2f57e5eecd947b2e0", 0xc8}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r4, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={'crc32c-generic\x00'}}) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) r9 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r7, r9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={'crc32c-generic\x00'}}) keyctl$instantiate_iov(0x14, r6, &(0x7f0000002680)=[{&(0x7f0000000300)="0d826fccd316ed3b33cac2dab9f3ae5863cd5627cdd8b29728078ac66843bf279ab3aa90fef9a83ae0ae5c729b0f921c83c936a721bf30e4ad3a7daa780bee7c931d1ddc51879f4a62f0eb957b7b0cf7589d183500b2c32ef71b7d91a85ae9a217c3cf775197758983", 0x69}, {&(0x7f0000000380)="5c19abd95b19f1ba864cb3ac7a420385f2996576ec93afafd5fa0881d1ac99997f32e9872af1ae5066ed5ddffcfc3cb67386bf3e8516bea36aa0b82b6354b993e4c9538cf6e8d85acc1a", 0x4a}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="a98b57072d80dca5637099d436f7bce82b92961c238159fccb499b4eb318aad28b3eba8fa0b8045cc4737e948a71496da5f0f0f097a3d9e663fff4338fabd17697aac32f79e61aa3f2a9094819233a17c58abae69e341f5b512fd8eeaa4e4b054927f821011e0a1586774246f4f02cd90d49425a4bd3018d1986a68db2228d032ea1e72e8bb4", 0x86}, {&(0x7f00000014c0)="e11030a2f36135a13472f43c99b07aa3ba7782932271f300fc2be39115aa608cc12f74cc3eccbfe612db2f3996912174cb946b5cfc1e9554b9fbcb3a1a3851c24e077aa2c3d7e814473312da1ab0355fa3b26be4449cbbe00475d2c32ed4367b4ed34df647af371dc8f5d42c3f2763d2c439c96a67870f7a273a6f8df2d1364ed990e43fdb4299243678bb1cf68ec91bbb45559f95d8ecf3f2d2700ad27522eb92a364f3f42600123131df7b3c898b9e333f101f96b2cc147a6273e07995ccc8141e9a8511430518313d5447ea26debac9911f1fa4edb61407cf175770ba80482f60484dda5b8d50240db30be00b23f3cd3dc638769edf5fbbc2b8f057aa18b26fe5db4d98a00a9360eb1e173c3cd5ffc9f1b875ae57799c35d7521ebbdae5dcf343e80bbce09c9eaeb3bd1881df352246a00835bc273601814578aa3b342c2d7d2e5d6232f324f941675b18f60377e003c8e0b519dab9ebb952db826c8e98c83bd7dfc8d5c62ed96569470c5156d0c47a3ed21cba8f9c0c7ce9f1df186a4a174431f610f5bbcc5f231140a917f5d1627805b8d875a544a2766e9399143102a2ce46a5c775d74629a437218302871a3cac5669714884bf08552a64a1b5040d6e48ad5d66b2950d0f5dc243f9736f76c812917fb2cd98ed916f396bd42490894f539ec816dc8d1949ab23f398b06d86cae37e1361f8ace6cc0ab3ad6b0f3cd0977262c83781e343d050ac5a5cc93d0d18a7a274861f0f37b45790650431df2f7f08120bdcb0c61d03571c76863d162b15b4e2ed3657c22ac496cfb5dc229766ad648d94f96296357f43db914cacc84eb2d30ae080ef3622c6e170f310e3f62858f1346ad4174e7bed5dad8f7433e732533fbd6b013ac8c62a0448fa5cb6b1e292f4ee0a11e97976aee7ac23887139df16abb08ef22f8b0f865bee4c5ae168b81f6af2a77baf5dba8bd58848ad494a90a6543a2bea6430b84b9f76fa4f5739036810fa4db02080a188fe2956a4c919d6d1a81118c4eec10f3449cc4f36cbaabd4f58f7d15bf466bd23092b566263edab4594a93d5deec9810c1b1c2ec50ed358186d48710788f8bf18fee92fe9f49bdb04d682815fe94ef8be33c38dd3f195062136412886ca242769f2acd74f2b109af8102831b0c967da24d36e73e741be5e5b75fc2fc792e4124ed149da96e7468b34eb2ac50a9742f6f042fccbe9f6c57bbd98ae587920fac983b2ff872f4db9f6f24aaaa9192b90ebb1c5b0cc4a4e19c3259628c927e2d66774dec2607b3cecd32832fd24c7391f7bf7f460575ebd9d675c440812c1e6548551eeb607435e5849bbe84ba8c055694873deb00ab53be213cb7d340200b0920a1db4e6834ca628fe7da6e2170740bc8d1e72f0096e0f14301b039e220e80bb2133468a75662b9c0d355410cf4700380933929cc46a93658f798c3a70b33535f226433d9f314d280f056ed6b9ba8c48011442628be4ee020923b233e933f4f75d558076bc0142675e19b3b6f4f51eb7b597a25e80fcdfb55fee97d93e0d3ee3b08648c7072454c78842d9895d287478b01d027eb5e9d2b7defd96b46246eedb13469d9d58952703dd225f0c35778858ae20131704b80f7c38fe04558759df489442cd3b3609607a2e7808835e20ea0c9afd44949e8313a29a38b5c6f6875e6e9fbed385ac03260b503b66258902f7091b66c1e1c7ea3a86b13bef521fbf0ed157a6216d253d9d6e355289e8353dc977bd0e65ae423afd89baf26cb1f40080b76b74cb95787aa8ee2adccb9191519a8f417c2292e557cfe3bc7728fb8b7fa4bbc3debbda490db5240be4b3b724d4e3ee80919d3d8df76a51911f00bb87d93a2dd0ff3e980754fec4d3b234caf8d8f5042ca722d0ac88ab00b7b6108511e85bdcdbbec2f9c0e4e98afbf497d4372dd7c0efcca2778d16f8addff58a4a91e6203490ae073168a984aebbb47f17144b94e699460a2a70492b2d2514648793ff9cb0c1a1cceb6730c9a9754826350651c0ba6d68b1412277c7bfd5a474384bf005fd5a6b471e2a85ca9ed686627bd18eca555fe2ba9f6fa2c8a1c9e8eabf9ea9fcc08ccd66481114a43078fbe6986c4b50f9821c57edb773576194cc7a5310181330ec9cd0c62a7e26d1b1edef91792d20fcaf5fd422f335180f4a6fe5de5277a61fe12f3329d643b0189fa4c2d1bce1e8ed2ea28fc69085f0c8f08918b6b7d467ee0c3577208a331f68cf380217c3c896c74c43ef470717692fdfd75056d97893173872319737d824b8360bc7e0cc112064106d5a866353497904872e08876c62c9e6330941a8db3f07b24ecc43051d2e2148d211921656ac8ed16de8694b0943f23c19bcc72bb3b18946d8ca587db2b7524763ff4de746e628980c22654344347040b52fb966773f5001ae2dd260c069b51a5deafc08fd3da89b6c3ac5c1bf69dd9cfc7f133496a5a5c429f51f372701abe1a0e56a012090dc2e7c516df24c93e53c50588df718ee85d99c50d974fb24ae2e30316f4a3d20c10967b3e619d79bc0ba82e581251a41694ab1946ee14981c186a211fa1410c961548ef7e191cbb24094500fb4042df3261b7a724ef3814b25fd71e3b95a87bcd95b3ce9f6184480013c17d968c2af05930bab69e2a87308d5945a0516ef06bce02f5e07535f71cde443cb48a4941978545db83f52dd6b5be25a83709638132cd027b309541d3f4bff21876b19e7141b7f400638e142410d6f995ee9694fd7b46840565edc41d88e92100a5cbf31d0d1e11c30e159921a05243de32cbdcf5e241e458cf9bfb981f4fa64218e52a68dabf85d1b844f1056a60223a627f05d5fc3caba28b1891fd3d8c34dae8c4c9bcaca062555b257beb307014eed917b05bfd8c3294dd49bca79f87f1a754f5bf414dcf6476ce28574e42cfaa375225423edbb0b5234713318de0a0e8eeceb220fb840425d3a27632ce1c5345ceb3dc7285b8e87f295cd836607b138c1ce380e3881586ec64bcd622338402f601139cc9ddabf4f02f189bb5a4e92e905c784db59a01f5b84f230c434485efb87d392d92a84e168de756ff72744596717d2a4faca587bfb0829cacd1db307974210cf73305043fb57915d115ad65846e1caf621427390ea7407372aee623d9e006b91c0137b49d6694b3868c6f4e4eb574624d5980e66d76d12cffedde7a33dcc76b4a4a9521c7c664684cf585448e21ce06d53a40ee909a385812e3bd72520264cfc739381f3621247baf69cf32447b77ea7f7f2440fd9725720355b342f13dc0471575832bd77638231a445ddc1c9f7228956eac89380344854a85a1a89ecae7457ec43a0946fbeaea719b0c0c70184b57934df16e06723426f417e8ab5df68f23d824c584262d67a31e73abff9fbb245925ee7df430a01975f6a05db0f188c17c298eb230173ea7bd4c18fe788f24c978897061daafce250c46378736a56d8fb8cff828732d737f220e2119db444ae1b79912235e44fa6c073058462abeca1e7e1e627ff54c0497c5b969bbb47816a491025d98bd0a78fa99e16d421d73f6fc8dd5de8c4df8e8a7667ec3e28e6c4c4388f9bb9c4d25c829e27c71165c3e241064abd2a587729600161c207ca69362a830b2d4465621093f3a04d11a117612ae33b7756176355656b16d9b6502e93356a5717e4042a1a92e7d142faebe0e56f1e13e6b6ad924ea8e5d1747c32ddd69a3ac1f2b70da6bac4710666ccb7c115ef16317ef3b8da0ab5f8de3aba7709cf55b74e3297284f89ceb900a5cb67b99c71d49ab54ca2ea953f72ca774810e99e057739d2512c655fae11df01a2541ce5dd895eb1f295a59d92b0d32a6a2aab2c25110ac480dbf6f8220555441b51cd1556e8e8176ce285e6402f7cce54174cb1b425c23a86475bd9b279408fdefab7ce54fd223aaabbf4ae1dfea0c55b2e88ef1113c3a8b664c0e8b8544384a046bf29d594abbfebfcbf29eee0b0819d69aca5ad38278c31ba42ec31972b4f2544696aa2bb441ea98e3bcc5bcc5c6641f58d6ea74fb9d386bdeed0673569f3c1598dfb09e90f016a0181916017b7299643cefcc6dd71b7f59fb735d32a140d4ba252032396ae5473aa70b9017f68a259f0ff7893960e24c302914c61d62d3a6ee98ae6d4c70fa764549fb20bff5d45838d30b0bffa2b847ee0221fdd931b2492d2fc98135c637c72e69b240d552b8fc16a55a09a56be3ec7d3fdc9df02f151b4200a141e6293571dc33dcc7353ed8f03144c805be847cff6afed877da09a81a9642fd9c976beae5e88ba4554863ad07766ec0365dd94295855b8d6ffe1611938c58561eb9e13452fe83bf8dad8375522558a6e454e25cef5d04c65e962e634e449554d8c8e1e4e8b857b8b698c2ec70a6cc6d3b3b2e11eaa7935ca75f9e231881935fc3685ada198654b7847ce22a81ca71d52339984c8c53c5d043088dec88f59261002109a9c0f6cc8183734ed1bd7b5d97d872ec4f3bad6ba03aca2cc79447052295ccf0d653b2757f7b777b0e48a9c7dbf512bdff4ab8f6f329add42583063729fcfd2e0e132112ecb05af0797576fa996d3d44f1a8a18a05f9513bbf747837f45b7ccd5b2f6a1ddb3c1be3dacc8bef05fcb6d942b7f6d4c0c8573f9b9f6bcb0bd55f59e9372e1452cf94718e3929303355002480fdac3e769573487dd24934bca8dc38e87bffdf24a87d20bcb43e4f1aa72f663932126e15dfe301d53a6f06ae1562e6592b17bb68c9565303a4b31fa0a724fc9a495e75e2d04a91c0cc1c23a1ad0d6ed8bd99e2853c916bf3e5f10094610fa2d6305594d04cd8b53c2eedbd1f2e6df5970c585654ce4e0097b313bffd348299dcb575259fab063841260401f7b38cb4d6d81f6a315d009090e6fd1dff97915a2932229f8bf2d216b713d189787a8602c49f52c20cf495106d89cff5f387c408ad681e94701f619bc533aaa72cd2d8129c2c5fbd1a1defeb615e846fc13dcc5f099b488ee3e8aeff8ab9653a5c426db15f87f1f20580ce3b97c46266d70b8807a1d73950023c0146caab68e2b1692b47fbbf575e7f4be82c449477a34e6214b02555abcc6d24d7824c0ec4df8100c064d80565ef254b1ebbf2067f370c6c99dfd5c419e02342d30e7da9f7b0ac38031fd272c502cb3b43f7a9373aec59ff765ff45e0927527342a2ff803e572f5e5233f5d4b405128dd05e07518794a16410cad4e4011eb4fafca15eec487888c6266782851d2ddc286de2a8f7e2614d32e1aeaf7e7b7c0180fb23b9127a4cd167f27b73bf96ea23f8d50c987195b6acb202d29f2855330505728199532c20f614917dd994349027e36e33593081327fafbf174e3997ffe7e44ab77fa853a7059e2e92b2cc00c80a5b63ad383481313f6f005cfc087ee51ba354e3be9dfb9c63c439961ac2ea26105d2c8acc3196025feeae1cf0ad495d57d077a7a0bcdc7bfebb3f7fdf8f7387088908a25ed7fdcadc47ea131cdeea36b78c8aaa4b5dd18b1c5bc6831703d87cbfc7c4513796da2b05ac6c940d8ea13b983e83c1c9e26bf78526385ecbf42d3ddfcf940f673dcf58fe4eb48b761832c9e4f58fa588766835aa044a79e5fc9f79e81b5df04601fbf91fbdb2b0a0d10b000e26ca2ebec51b841e5aa1ca5c3960f0a8a2fcef09aa231ebdd10ac8abc9447736fcbe113b862ea4e51aa799eef78eb9f143161a34bd13196578be6e334ec9c43b2e1baf595d3278f60c6495ff6d93c94ce884db9e7cb6534e96f857d4e56b9ccadc721ab119be09bbc571d4fc5eda8be9b0c3c", 0x1000}, {&(0x7f00000024c0)="3ff1437dcd6fe29676a3571f8e1be66d8c2d528014a49405a537b47bbd906251cada9bb1a390b281e577fa788836bb4124a0d49f9399b1ec0efb775b8126ebdc4b8869463686a5063eaa8b10e8efc90899b8430e4684364dd2087805ac8663195aa59a9e65db477c09a52a751e01e2c1d5069ceb38c90ebf76814f3b181ac07ad749243e4203e0fdcc2bcbb19db9a4dc2983122cd853375e3c63b421e6365e9a1658394aa96186550b363fb45fc6f4801426d001500ad6fde6705074ab572b31ad018f5d58c8df01633b4edf464f68d359bdf8be030f3406c95eca910c4a74bce8fbbd7ab04146ad9a", 0xe9}, {&(0x7f00000025c0)="c3dfe18b997bb31026c077bcf8f85afe91a8c46c06acbce98110d4181ef916c326d25999f8a13a5a5a67b22c99f4da3b542223f995862943f5f83d1304247b5ff3b8159dc123bd85dcd051bf018b2e344b0c7ecf541b91da6f5421a03ec931c6976b06a4a288cc02a8e3b54767447d54bcab09292d97a324de5158cc23500ff380", 0x81}], 0x7, r9) [ 1409.106775][T28792] bond0: (slave bond_slave_1): Releasing backup interface 15:19:43 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x200000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x4000, 0x5, [], [0xc1]}) [ 1409.318295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.324204][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0xff00, 0x5, [], [0xc1]}) 15:19:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) connect$packet(r3, &(0x7f0000000240)={0x11, 0x1c, r5, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x43, "6490eb04719446a88266a7e99e4122ece2d20601adf741ef66df21fd39fd7c4da334a4f86b83ff9db53b1529bc8177e0e752e1d1df71c8c295db26b7558f9fdbd82d73"}, &(0x7f0000000100)=0x4b) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2, 0x1ff}, 0x8) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1409.638303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.644192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.650106][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x80ffff, 0x5, [], [0xc1]}) [ 1409.831252][T28784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:19:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x1000000, 0x5, [], [0xc1]}) [ 1409.965567][T28798] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1410.054046][T28784] bond0: (slave bond_slave_1): Releasing backup interface 15:19:44 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) 15:19:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x2000000, 0x5, [], [0xc1]}) 15:19:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x8012, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000e00)=[{&(0x7f0000000b40)="a376dd1b19517d9a8e431f2d6029af8860d674c22604e1ee78d91af0fabfa6f3f6b98c9e3272", 0xffffff1f}, {&(0x7f0000000b80)="1745f3435fa9cc97ba5976108a59ddf5449dc9c1747932945fe935920cebf99705f4dd1ca38e8d4b314fb65478b7ff6fc9b58652", 0x34}], 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)='k', 0x1}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0xff, 0x1, 0x6}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x12, r5, 0x100000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x2, 0x1ccec669ca506721, [0x6, 0x400, 0x3, 0x3, 0x0, 0x2, 0x4, 0x1f]}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000940)=""/243) [ 1410.815651][T28865] ------------[ cut here ]------------ [ 1410.821737][T28865] kernel BUG at arch/x86/kvm/mmu/mmu.c:3416! [ 1410.827922][T28865] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1410.834003][T28865] CPU: 1 PID: 28865 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 1410.842673][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.852879][T28865] RIP: 0010:transparent_hugepage_adjust+0x4c8/0x550 [ 1410.859475][T28865] Code: ff ff e8 eb 5d 5e 00 48 8b 45 b8 48 83 e8 01 48 89 45 c8 e9 a3 fd ff ff 48 89 df e8 c2 f8 9b 00 e9 7b fb ff ff e8 c8 5d 5e 00 <0f> 0b 48 8b 7d c8 e8 ad f8 9b 00 e9 ba fc ff ff 49 8d 7f 30 e8 7f [ 1410.879082][T28865] RSP: 0018:ffffc90002ccf678 EFLAGS: 00010212 [ 1410.885150][T28865] RAX: 0000000000040000 RBX: ffffc90002ccf768 RCX: ffffc9001208a000 [ 1410.893119][T28865] RDX: 0000000000001b46 RSI: ffffffff8116cdc8 RDI: 0000000000000007 [ 1410.901090][T28865] RBP: ffffc90002ccf6c0 R08: ffff8880995605c0 R09: ffffed100b029682 [ 1410.909059][T28865] R10: ffffed100b029681 R11: ffff88805814b40b R12: 0000000000000193 [ 1410.917032][T28865] R13: 000000000006e193 R14: 000000000006e191 R15: 0000000000000000 [ 1410.925007][T28865] FS: 00007f22e885a700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1410.933939][T28865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1410.940522][T28865] CR2: 0000000000000000 CR3: 0000000056ae1000 CR4: 00000000001426e0 [ 1410.948492][T28865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1410.956464][T28865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1410.964631][T28865] Call Trace: [ 1410.967931][T28865] tdp_page_fault+0x580/0x6a0 [ 1410.972622][T28865] ? nonpaging_page_fault+0x610/0x610 [ 1410.978013][T28865] ? is_bpf_text_address+0xce/0x160 [ 1410.983219][T28865] kvm_mmu_page_fault+0x1dd/0x1800 [ 1410.988333][T28865] ? __kasan_check_read+0x11/0x20 [ 1410.993362][T28865] ? mark_lock+0xc2/0x1220 [ 1410.997782][T28865] ? arch_stack_walk+0x97/0xf0 [ 1411.002570][T28865] ? kvm_nx_lpage_recovery_worker+0x7f0/0x7f0 [ 1411.008648][T28865] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1411.014813][T28865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1411.020363][T28865] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1411.026422][T28865] handle_ept_violation+0x259/0x560 [ 1411.031626][T28865] ? vmx_inject_irq+0x5c0/0x5c0 [ 1411.036650][T28865] vmx_handle_exit+0x29f/0x1730 [ 1411.041519][T28865] vcpu_enter_guest+0x334f/0x6110 [ 1411.046547][T28865] ? mark_held_locks+0xf0/0xf0 [ 1411.051322][T28865] ? kvm_vcpu_reload_apic_access_page+0x370/0x370 [ 1411.057740][T28865] ? lock_acquire+0x190/0x410 [ 1411.062423][T28865] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 1411.068587][T28865] kvm_arch_vcpu_ioctl_run+0x430/0x17b0 [ 1411.074132][T28865] ? kvm_arch_vcpu_ioctl_run+0x430/0x17b0 [ 1411.079857][T28865] kvm_vcpu_ioctl+0x4dc/0xfc0 [ 1411.084538][T28865] ? kvm_clear_dirty_log_protect+0x820/0x820 [ 1411.090522][T28865] ? tomoyo_path_number_perm+0x25e/0x520 [ 1411.096160][T28865] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1411.101984][T28865] ? kvm_clear_dirty_log_protect+0x820/0x820 [ 1411.107970][T28865] do_vfs_ioctl+0x977/0x14e0 [ 1411.112567][T28865] ? compat_ioctl_preallocate+0x220/0x220 [ 1411.118286][T28865] ? __fget+0x37f/0x550 [ 1411.122450][T28865] ? ksys_dup3+0x3e0/0x3e0 [ 1411.126870][T28865] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1411.132594][T28865] ? tomoyo_file_ioctl+0x23/0x30 [ 1411.137532][T28865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1411.143767][T28865] ? security_file_ioctl+0x8d/0xc0 [ 1411.148879][T28865] ksys_ioctl+0xab/0xd0 [ 1411.153034][T28865] __x64_sys_ioctl+0x73/0xb0 [ 1411.157623][T28865] do_syscall_64+0xfa/0x790 [ 1411.162127][T28865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1411.168039][T28865] RIP: 0033:0x45a909 [ 1411.172091][T28865] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1411.191698][T28865] RSP: 002b:00007f22e8859c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.200109][T28865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 1411.208078][T28865] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 1411.216053][T28865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1411.224028][T28865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22e885a6d4 [ 1411.232006][T28865] R13: 00000000004c410f R14: 00000000004d9758 R15: 00000000ffffffff [ 1411.239988][T28865] Modules linked in: [ 1411.244174][T28865] ---[ end trace 5e8b253501613523 ]--- [ 1411.249688][T28865] RIP: 0010:transparent_hugepage_adjust+0x4c8/0x550 [ 1411.250715][ T4090] kobject: 'loop5' (00000000a8841fb7): kobject_uevent_env [ 1411.256275][T28865] Code: ff ff e8 eb 5d 5e 00 48 8b 45 b8 48 83 e8 01 48 89 45 c8 e9 a3 fd ff ff 48 89 df e8 c2 f8 9b 00 e9 7b fb ff ff e8 c8 5d 5e 00 <0f> 0b 48 8b 7d c8 e8 ad f8 9b 00 e9 ba fc ff ff 49 8d 7f 30 e8 7f [ 1411.283039][T28865] RSP: 0018:ffffc90002ccf678 EFLAGS: 00010212 [ 1411.284732][T28871] kobject: 'kvm' (000000002b34389a): kobject_uevent_env [ 1411.289137][T28865] RAX: 0000000000040000 RBX: ffffc90002ccf768 RCX: ffffc9001208a000 [ 1411.289146][T28865] RDX: 0000000000001b46 RSI: ffffffff8116cdc8 RDI: 0000000000000007 [ 1411.289155][T28865] RBP: ffffc90002ccf6c0 R08: ffff8880995605c0 R09: ffffed100b029682 [ 1411.289163][T28865] R10: ffffed100b029681 R11: ffff88805814b40b R12: 0000000000000193 [ 1411.289171][T28865] R13: 000000000006e193 R14: 000000000006e191 R15: 0000000000000000 [ 1411.289180][T28865] FS: 00007f22e885a700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1411.289195][T28865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1411.299784][T28871] kobject: 'kvm' (000000002b34389a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1411.304095][T28865] CR2: 0000000000000000 CR3: 0000000056ae1000 CR4: 00000000001426e0 [ 1411.304110][T28865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1411.323714][T28894] kobject: 'kvm' (000000002b34389a): kobject_uevent_env [ 1411.328046][T28865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1411.328055][T28865] Kernel panic - not syncing: Fatal exception [ 1411.329707][T28865] Kernel Offset: disabled [ 1411.403880][T28865] Rebooting in 86400 seconds..