9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x6, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f00000002c0)={0xd8, ""/216}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x30, 0x2, 0x1, 0x1, 0x80000003, 0xfffffffffffffffe, 0xfffffffffffffffb}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0x4) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r6, 0x3, 0x0) [ 525.434050] devpts: called with bogus options [ 525.500678] devpts: called with bogus options 04:32:00 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x7, 0x4, 0x6}]}}}], 0x18}, 0x0) [ 525.590188] protocol 88fb is buggy, dev hsr_slave_0 [ 525.595449] protocol 88fb is buggy, dev hsr_slave_1 [ 525.600595] protocol 88fb is buggy, dev hsr_slave_0 [ 525.605928] protocol 88fb is buggy, dev hsr_slave_1 [ 525.611974] protocol 88fb is buggy, dev hsr_slave_0 [ 525.617230] protocol 88fb is buggy, dev hsr_slave_1 [ 526.938580] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 526.956526] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 526.974441] CPU: 0 PID: 6904 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 526.981512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.994195] Call Trace: [ 526.996797] dump_stack+0x138/0x197 [ 527.000425] ? trace_event_raw_event_rdev_assoc+0x310/0x560 [ 527.006143] dump_header+0x177/0x6cd [ 527.010307] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 527.015496] ? ___ratelimit+0x55/0x537 [ 527.019653] oom_kill_process.cold+0x10/0xadd [ 527.024893] ? oom_unkillable_task+0x294/0x390 [ 527.030182] ? lock_downgrade+0x740/0x740 [ 527.034338] out_of_memory+0x2ee/0x1180 [ 527.038401] ? lock_acquire+0x16f/0x430 [ 527.042476] ? oom_killer_disable+0x1d0/0x1d0 [ 527.046985] ? __alloc_pages_slowpath+0xca4/0x2930 [ 527.051930] __alloc_pages_slowpath+0x2251/0x2930 [ 527.057571] ? __alloc_pages_nodemask+0x639/0x7a0 [ 527.062774] ? warn_alloc+0xf0/0xf0 [ 527.066666] ? __might_sleep+0x93/0xb0 [ 527.070591] __alloc_pages_nodemask+0x62c/0x7a0 [ 527.075364] ? __alloc_pages_slowpath+0x2930/0x2930 [ 527.080481] ? lock_downgrade+0x740/0x740 [ 527.085091] ? find_get_entry+0x23c/0x520 [ 527.089254] alloc_pages_current+0xec/0x1e0 [ 527.093630] __page_cache_alloc+0x248/0x3e0 [ 527.097958] filemap_fault+0xcc9/0x19a0 [ 527.101969] ? __lock_page_or_retry+0x8d0/0x8d0 [ 527.106753] ? lock_acquire+0x16f/0x430 [ 527.111674] ? ext4_filemap_fault+0x7b/0xb0 [ 527.116461] ext4_filemap_fault+0x83/0xb0 [ 527.121143] __do_fault+0x104/0x390 [ 527.124901] __handle_mm_fault+0x2460/0x3470 [ 527.129312] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 527.134157] ? find_held_lock+0x35/0x130 [ 527.138221] ? handle_mm_fault+0x1b6/0x7c0 [ 527.142754] handle_mm_fault+0x293/0x7c0 [ 527.147259] __do_page_fault+0x4c1/0xb80 [ 527.151946] ? vmalloc_fault+0xe30/0xe30 [ 527.156222] ? page_fault+0x2f/0x50 [ 527.159848] do_page_fault+0x71/0x511 [ 527.163742] ? page_fault+0x2f/0x50 [ 527.167405] page_fault+0x45/0x50 [ 527.171415] RIP: 0033:0x40ec10 [ 527.175293] RSP: 002b:000000c42004fee0 EFLAGS: 00010216 [ 527.181188] RAX: 00000000018a2480 RBX: 0000000000000000 RCX: 000000c420000480 [ 527.188452] RDX: 0000000000000080 RSI: 000000c42004f918 RDI: 0000000000000004 [ 527.196023] RBP: 000000c42004ff18 R08: 0000000000000000 R09: 0000008e413fd246 [ 527.204253] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000042f0a0 [ 527.212411] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 527.234630] Mem-Info: [ 527.237152] active_anon:1347274 inactive_anon:184 isolated_anon:0 [ 527.237152] active_file:41 inactive_file:0 isolated_file:0 [ 527.237152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 527.237152] slab_reclaimable:16670 slab_unreclaimable:110982 [ 527.237152] mapped:52226 shmem:242 pagetables:23173 bounce:0 [ 527.237152] free:24956 free_pcp:0 free_cma:0 [ 527.282775] Node 0 active_anon:1952632kB inactive_anon:708kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1277952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 527.326671] Node 1 active_anon:3436560kB inactive_anon:28kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 527.368050] Node 0 DMA free:10520kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.407979] lowmem_reserve[]: 0 2580 2580 2580 [ 527.416648] Node 0 DMA32 free:36460kB min:36468kB low:45584kB high:54700kB active_anon:1950248kB inactive_anon:708kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14720kB pagetables:45524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.461311] lowmem_reserve[]: 0 0 0 0 [ 527.465301] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.508916] lowmem_reserve[]: 0 0 0 0 [ 527.512854] Node 1 Normal free:52960kB min:53420kB low:66772kB high:80124kB active_anon:3436560kB inactive_anon:28kB active_file:96kB inactive_file:52kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18464kB pagetables:47156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.555346] lowmem_reserve[]: 0 0 0 0 [ 527.559228] Node 0 DMA: 2*4kB (UM) 2*8kB (ME) 12*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10520kB [ 527.587600] Node 0 DMA32: 56*4kB (UE) 811*8kB (UME) 956*16kB (UME) 308*32kB (UME) 5*64kB (UE) 1*128kB (M) 0*256kB 0*512kB 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 36408kB [ 527.614815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 527.629842] Node 1 Normal: 25*4kB (UM) 54*8kB (UME) 101*16kB (UME) 500*32kB (UM) 138*64kB (UME) 23*128kB (UME) 8*256kB (M) 5*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (M) = 52964kB [ 527.657919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.669522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 527.688436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.698252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 527.716628] 277 total pagecache pages [ 527.722742] 0 pages in swap cache [ 527.726208] Swap cache stats: add 0, delete 0, find 0/0 [ 527.739342] Free swap = 0kB [ 527.744511] Total swap = 0kB [ 527.748186] 1965979 pages RAM [ 527.758991] 0 pages HighMem/MovableOnly [ 527.768691] 333229 pages reserved [ 527.778342] 0 pages cma reserved [ 527.797927] Out of memory: Kill process 20671 (syz-executor.2) score 1007 or sacrifice child [ 527.825246] Killed process 20671 (syz-executor.2) total-vm:73116kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 527.984081] oom_reaper: reaped process 20671 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:32:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000800b8000699030000000500150004008178a8001600400003000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 04:32:04 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:04 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0)="650e994bfd6f7b6724be6ffe7de5756f5871426d191d4259cb1346025def1a5590d96cc906c7c236d730c485177699d07da8c0fbe39301f7bffbea92fd49b3aba02a2f0ed7c1d5793dc0ebadfdc00d44b220a4af3f301da958c5f91ef7c0ad1b847c95299d4b3c909a4da2a5e9bab91080cdd7e97d595f37351d5e9ceb158aa00c5f9040f96be61101f280ef19b1a18121bb3831b7e90ff9d174d8db1cec27bd210a3ff07672d0929e5604554d34aecb2f4df9c46ffe270e187a07c51402e82fad3d0296bd9dd58d802361c134741df1ef61bdb73436a9c06f02a0eb5b1a2c1f1c65c8e03134e87b"}, 0x20) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) 04:32:05 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f102cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}, {}], "25cdfbdef6eeb90cac5a93f8d6282ad05d8de9531b2f6baa96d0d6c8c781789eae1dfb5b03d4d476e4963313f0058cf5b425e6f5"}, 0xac) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825210c28f5e87a648203b91e7f1ffd7e4ab569f0008000000000000cdcf9482c1f0d81a590ed76f2c4af37b9000000023d61ca62ef8d48f42ffd113acf060c105020d4862fc399eaa05000000b6510490b0f420326bcc4e2b65e7c68bacee7877a6274a7be89a7d527a2a8a03a722ffa87ec2dfec4758b0245bbcc9c5e726fea942494855d4bd3388070000000000005400000000000000000000000000000000000063b5d1c7b194133ebd97876d9dc49a0cb0814d5d64ad241abe145ccfa3648b1f37351eb367a3120454c33e4426e43846acd92068cc9dd0317d055d5721f6f5d1b5", @ANYRESOCT], 0x0, 0x109}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 530.045866] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.045938] devpts: called with bogus options [ 530.058541] devpts: called with bogus options [ 530.937730] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 530.955630] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 530.963831] CPU: 1 PID: 22415 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 530.970868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.980463] Call Trace: [ 530.983068] dump_stack+0x138/0x197 [ 530.986718] dump_header+0x177/0x6cd [ 530.990464] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 530.995580] ? ___ratelimit+0x55/0x537 [ 530.999653] oom_kill_process.cold+0x10/0xadd [ 531.004193] ? rcu_read_unlock_special+0x895/0xd40 [ 531.009220] ? lock_downgrade+0x740/0x740 [ 531.013379] out_of_memory+0x2ee/0x1180 [ 531.017359] ? lock_acquire+0x16f/0x430 [ 531.021345] ? oom_killer_disable+0x1d0/0x1d0 [ 531.025841] ? __alloc_pages_slowpath+0xca4/0x2930 [ 531.030774] __alloc_pages_slowpath+0x2251/0x2930 [ 531.035635] ? warn_alloc+0xf0/0xf0 [ 531.039273] ? __might_sleep+0x93/0xb0 [ 531.043165] __alloc_pages_nodemask+0x62c/0x7a0 [ 531.047840] ? __alloc_pages_slowpath+0x2930/0x2930 [ 531.052965] ? __lock_acquire+0x5f7/0x4620 [ 531.057215] ? __handle_mm_fault+0x1c49/0x3470 [ 531.061839] alloc_pages_vma+0xc9/0x4c0 [ 531.065910] __handle_mm_fault+0x18f3/0x3470 [ 531.070544] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 531.075311] ? find_held_lock+0x35/0x130 [ 531.079463] ? handle_mm_fault+0x1b6/0x7c0 [ 531.083732] handle_mm_fault+0x293/0x7c0 [ 531.087801] __get_user_pages+0x465/0x1220 [ 531.092103] ? follow_page_mask+0x1560/0x1560 [ 531.097108] get_user_pages_remote+0x1bf/0x3a0 [ 531.101729] process_vm_rw_core.isra.0+0x470/0xa60 [ 531.106679] ? __vunmap.cold+0x40/0x40 [ 531.110570] ? kasan_check_write+0x14/0x20 [ 531.114885] ? _copy_from_user+0x99/0x110 [ 531.119041] ? rw_copy_check_uvector+0x1f1/0x290 [ 531.123804] process_vm_rw+0x1cb/0x1e0 [ 531.128055] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 531.133258] ? __might_fault+0x110/0x1d0 [ 531.137515] ? find_held_lock+0x35/0x130 [ 531.141684] ? __might_fault+0x110/0x1d0 [ 531.145924] ? lock_downgrade+0x740/0x740 [ 531.150083] ? kasan_check_read+0x11/0x20 [ 531.154300] ? _copy_to_user+0x87/0xd0 [ 531.158204] ? put_timespec64+0xb4/0x100 [ 531.162449] ? nsecs_to_jiffies+0x30/0x30 [ 531.166612] SyS_process_vm_writev+0x42/0x60 [ 531.171122] ? SyS_process_vm_readv+0x60/0x60 [ 531.175629] do_syscall_64+0x1e8/0x640 [ 531.179523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.184465] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 531.189675] RIP: 0033:0x459f49 [ 531.192862] RSP: 002b:00007f0568407c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 531.200583] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 531.207852] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 0000000000000810 [ 531.215300] RBP: 000000000075bf20 R08: 0000000000000299 R09: 0000000000000000 [ 531.223448] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007f05684086d4 [ 531.230737] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 531.243368] Mem-Info: [ 531.245861] active_anon:1347235 inactive_anon:182 isolated_anon:0 [ 531.245861] active_file:18 inactive_file:16 isolated_file:0 [ 531.245861] unevictable:0 dirty:0 writeback:0 unstable:0 [ 531.245861] slab_reclaimable:16734 slab_unreclaimable:110991 [ 531.245861] mapped:52226 shmem:242 pagetables:23177 bounce:0 [ 531.245861] free:25004 free_pcp:0 free_cma:0 [ 531.283837] Node 0 active_anon:1952900kB inactive_anon:708kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1277952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 531.316362] Node 1 active_anon:3436040kB inactive_anon:20kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 531.346977] Node 0 DMA free:10520kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.381742] lowmem_reserve[]: 0 2580 2580 2580 [ 531.387096] Node 0 DMA32 free:36396kB min:36468kB low:45584kB high:54700kB active_anon:1950512kB inactive_anon:708kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14720kB pagetables:45520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.423486] lowmem_reserve[]: 0 0 0 0 [ 531.427336] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.460317] lowmem_reserve[]: 0 0 0 0 [ 531.464172] Node 1 Normal free:53100kB min:53420kB low:66772kB high:80124kB active_anon:3436040kB inactive_anon:20kB active_file:60kB inactive_file:72kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18432kB pagetables:47176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.501456] lowmem_reserve[]: 0 0 0 0 [ 531.505306] Node 0 DMA: 2*4kB (UM) 2*8kB (ME) 12*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10520kB [ 531.520910] net_ratelimit: 26 callbacks suppressed [ 531.520916] protocol 88fb is buggy, dev hsr_slave_0 [ 531.520976] protocol 88fb is buggy, dev hsr_slave_1 [ 531.521076] protocol 88fb is buggy, dev hsr_slave_0 [ 531.521123] protocol 88fb is buggy, dev hsr_slave_1 [ 531.552166] Node 0 DMA32: 51*4kB (UME) 813*8kB (UME) 950*16kB (UME) 311*32kB (UME) 5*64kB (UE) 1*128kB (M) 0*256kB 0*512kB 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 36404kB [ 531.569828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 531.586357] Node 1 Normal: 25*4kB (M) 13*8kB (U) 104*16kB (U) 515*32kB (UME) 137*64kB (UM) 21*128kB (U) 5*256kB (M) 7*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (M) = 53100kB [ 531.612624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.627311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 531.638813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.665090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 531.679405] 276 total pagecache pages [ 531.698060] 0 pages in swap cache [ 531.705454] Swap cache stats: add 0, delete 0, find 0/0 [ 531.716887] Free swap = 0kB [ 531.719927] Total swap = 0kB [ 531.726833] 1965979 pages RAM [ 531.735745] 0 pages HighMem/MovableOnly [ 531.739766] 333229 pages reserved [ 531.757082] 0 pages cma reserved [ 531.766293] Out of memory: Kill process 7773 (syz-executor.0) score 1007 or sacrifice child [ 531.779549] Killed process 7773 (syz-executor.0) total-vm:73116kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 531.830147] protocol 88fb is buggy, dev hsr_slave_0 [ 531.835258] protocol 88fb is buggy, dev hsr_slave_1 [ 531.840404] protocol 88fb is buggy, dev hsr_slave_0 [ 531.845671] protocol 88fb is buggy, dev hsr_slave_1 [ 531.851213] protocol 88fb is buggy, dev hsr_slave_0 [ 531.856568] protocol 88fb is buggy, dev hsr_slave_1 [ 531.939907] ptrace attach of "/root/syz-executor.4"[22429] was attempted by "/root/syz-executor.4"[22430] [ 531.953926] oom_reaper: reaped process 7773 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:32:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x160, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="2e360f2b99dc00660f71e0ff0f01c80fe0b41e002e0f01cb0f01cfba4000b860bdef0f58bd00000f01b100000f0118", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x402400) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x4004008}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:32:08 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f0000000100)=""/210, &(0x7f0000000240)=0xd2) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000300)) lseek(r5, 0x3, 0x0) 04:32:08 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 534.064360] devpts: called with bogus options [ 535.878710] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 535.892107] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 535.897605] CPU: 1 PID: 22442 Comm: syz-executor.1 Not tainted 4.14.151 #0 [ 535.904607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.913954] Call Trace: [ 535.916828] dump_stack+0x138/0x197 [ 535.920440] dump_header+0x177/0x6cd [ 535.924137] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 535.929226] ? ___ratelimit+0x55/0x537 [ 535.933121] oom_kill_process.cold+0x10/0xadd [ 535.937616] ? oom_unkillable_task+0x294/0x390 [ 535.942219] ? lock_downgrade+0x740/0x740 [ 535.948118] out_of_memory+0x2ee/0x1180 [ 535.952183] ? lock_acquire+0x16f/0x430 [ 535.956166] ? oom_killer_disable+0x1d0/0x1d0 [ 535.960667] ? __alloc_pages_slowpath+0xca4/0x2930 [ 535.965601] __alloc_pages_slowpath+0x2251/0x2930 [ 535.970464] ? warn_alloc+0xf0/0xf0 [ 535.974103] ? __might_sleep+0x93/0xb0 [ 535.978017] __alloc_pages_nodemask+0x62c/0x7a0 [ 535.982858] ? wp_page_copy+0xd0c/0x1410 [ 535.986929] ? __alloc_pages_slowpath+0x2930/0x2930 [ 535.991958] ? __lock_acquire+0x5f7/0x4620 [ 535.996180] ? __lock_acquire+0x5f7/0x4620 [ 536.000402] alloc_pages_vma+0xc9/0x4c0 [ 536.004359] wp_page_copy+0xb13/0x1410 [ 536.008231] ? follow_pfn+0x220/0x220 [ 536.012014] do_wp_page+0x24b/0x12b0 [ 536.015729] ? finish_mkwrite_fault+0x620/0x620 [ 536.020396] __handle_mm_fault+0x1d4a/0x3470 [ 536.024891] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 536.029633] ? find_held_lock+0x35/0x130 [ 536.033690] ? handle_mm_fault+0x1b6/0x7c0 [ 536.037917] handle_mm_fault+0x293/0x7c0 [ 536.041966] __do_page_fault+0x4c1/0xb80 [ 536.046282] ? vmalloc_fault+0xe30/0xe30 [ 536.050335] do_page_fault+0x71/0x511 [ 536.054120] page_fault+0x25/0x50 [ 536.057560] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 536.063422] RSP: 0000:ffff88820edcfb30 EFLAGS: 00010206 [ 536.068931] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 536.076192] RDX: 0000000000001000 RSI: ffff8882029fbb00 RDI: 000000002066a000 [ 536.083450] RBP: ffff88820edcfb60 R08: ffffed104053f800 R09: 0000000000000000 [ 536.090702] R10: ffffed104053f7ff R11: ffff8882029fbfff R12: 0000000020669500 [ 536.097957] R13: ffff8882029fb000 R14: 00007ffffffff000 R15: 000000002066a500 [ 536.105250] ? copyout+0x9c/0xb0 [ 536.108635] copy_page_to_iter+0x31b/0xc40 [ 536.112896] pipe_to_user+0xb0/0x160 [ 536.116616] __splice_from_pipe+0x348/0x780 [ 536.120981] ? iter_to_pipe+0x4e0/0x4e0 [ 536.124948] vmsplice_to_user+0x197/0x1c0 [ 536.129105] ? __splice_from_pipe+0x780/0x780 [ 536.133603] ? __fget+0x210/0x370 [ 536.137042] ? find_held_lock+0x35/0x130 [ 536.141285] ? lock_downgrade+0x720/0x740 [ 536.145437] ? __fget+0x237/0x370 [ 536.149316] ? __fget_light+0x172/0x1f0 [ 536.153279] SyS_vmsplice+0x131/0x160 [ 536.157078] ? default_file_splice_write+0x80/0x80 [ 536.161994] do_syscall_64+0x1e8/0x640 [ 536.165866] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.170695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 536.175891] RIP: 0033:0x459f49 [ 536.179081] RSP: 002b:00007f8adfdcfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 536.186799] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459f49 [ 536.194063] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 536.201318] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 536.208631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8adfdd06d4 [ 536.215889] R13: 00000000004c9c89 R14: 00000000004e1968 R15: 00000000ffffffff [ 536.324798] Mem-Info: [ 536.327630] active_anon:1347056 inactive_anon:307 isolated_anon:0 [ 536.327630] active_file:16 inactive_file:20 isolated_file:32 [ 536.327630] unevictable:0 dirty:0 writeback:0 unstable:0 [ 536.327630] slab_reclaimable:16783 slab_unreclaimable:110757 [ 536.327630] mapped:52374 shmem:365 pagetables:23196 bounce:0 [ 536.327630] free:25093 free_pcp:31 free_cma:0 [ 536.363790] Node 0 active_anon:1951220kB inactive_anon:900kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:209176kB dirty:0kB writeback:0kB shmem:1132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1261568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 536.392788] Node 1 active_anon:3437004kB inactive_anon:328kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:320kB dirty:0kB writeback:0kB shmem:328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 536.420154] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.448000] lowmem_reserve[]: 0 2580 2580 2580 [ 536.452678] Node 0 DMA32 free:36388kB min:36468kB low:45584kB high:54700kB active_anon:1948832kB inactive_anon:900kB active_file:40kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14656kB pagetables:45536kB bounce:0kB free_pcp:256kB local_pcp:120kB free_cma:0kB [ 536.483986] lowmem_reserve[]: 0 0 0 0 [ 536.488141] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.516138] lowmem_reserve[]: 0 0 0 0 [ 536.550169] Node 1 Normal free:53408kB min:53420kB low:66772kB high:80124kB active_anon:3437004kB inactive_anon:328kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18240kB pagetables:47236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.582553] lowmem_reserve[]: 0 0 0 0 [ 536.586418] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 12*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 536.602221] Node 0 DMA32: 23*4kB (UME) 772*8kB (UME) 871*16kB (UME) 300*32kB (UME) 10*64kB (UME) 1*128kB (M) 0*256kB 0*512kB 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 36716kB [ 536.618294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.629505] Node 1 Normal: 28*4kB (UME) 86*8kB (UME) 122*16kB (UME) 521*32kB (UME) 139*64kB (UM) 22*128kB (UM) 1*256kB (M) 7*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (M) = 53408kB [ 536.647154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.657151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.665790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.675436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 536.684075] 404 total pagecache pages [ 536.687883] 0 pages in swap cache [ 536.711187] Swap cache stats: add 0, delete 0, find 0/0 [ 536.726382] Free swap = 0kB [ 536.778035] Total swap = 0kB [ 536.783823] 1965979 pages RAM [ 536.787009] 0 pages HighMem/MovableOnly [ 536.791137] 333229 pages reserved [ 536.794643] 0 pages cma reserved [ 536.798063] Out of memory: Kill process 10885 (syz-executor.0) score 1007 or sacrifice child [ 536.807205] Killed process 10885 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 537.224072] devpts: called with bogus options 04:32:12 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) r1 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r1, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000080)) 04:32:12 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 537.750125] net_ratelimit: 26 callbacks suppressed [ 537.750131] protocol 88fb is buggy, dev hsr_slave_0 [ 537.760699] protocol 88fb is buggy, dev hsr_slave_1 [ 537.765994] protocol 88fb is buggy, dev hsr_slave_0 [ 537.771115] protocol 88fb is buggy, dev hsr_slave_1 04:32:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)=""/80, 0x50}, {&(0x7f0000000580)=""/120, 0x8}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x16a, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480a0006000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) [ 538.310225] protocol 88fb is buggy, dev hsr_slave_0 [ 538.315493] protocol 88fb is buggy, dev hsr_slave_1 [ 538.320674] protocol 88fb is buggy, dev hsr_slave_0 [ 538.325913] protocol 88fb is buggy, dev hsr_slave_1 [ 538.331394] protocol 88fb is buggy, dev hsr_slave_0 [ 538.336660] protocol 88fb is buggy, dev hsr_slave_1 [ 538.390983] devpts: called with bogus options 04:32:13 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:13 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000880)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5531e04d55fb1c26504e3e4738aac76780b5c23636981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52", 0xd1, 0x8090, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a94625a3a07e758044d64ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e", 0x5c, 0x0, 0x0, 0x0) 04:32:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r2, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000052c0)={0x29, 0x3, 0x0, {0x2, 0x8, 0x0, '\xe0selinux'}}, 0x29) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = syz_open_dev$cec(&(0x7f0000005300)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000005340)={0xc, 0x8, 0xfa00, {&(0x7f0000006b00)}}, 0x10) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x17, 0x0, &(0x7f0000000300)) sendmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast2}, 0x4, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)='6', 0x1}, {&(0x7f00000002c0)="d55d38fe6a56d63cb44f48dac934cf655be0a6efb7f6be039670f14e18f2369e584910d5a1ba1d34a807c506b990b4092ff9d099fec47e4e7787158cdfd6c38b598a856848164ffb93abde7404e10f4e4954117e393b133e4348855de3945906b7d9e2db845fc7e84d6883b5d7d395ec72f6602aaa708ae0ed8a293a19e84366e8f373d122a2d04c7abd3965b8d4fb7a2d525e5372b59990105bf19458190ab05bfed9cece387a7e3998953be2cedd4cae0b69df378c9fbc4c383ad59bd1a3e02676f9b8afb9e2d05f33343ffaa87c0b6aa8b85ba878e77356afe12db65397e5eb0045e65bc59997fa1f6faf44e5b136e79d6f91de1a5a02516b8a8252cdc13538459d14baf4f2e7473a1279e1166803f853ff07f179224a301c4491ca39e54d9d3618d48409170b284a42d05cedbd112b4cf334bbe89c9b4ff4ba8a25a37eaf188bbeeaabb76e42e5783addb2f9420f7f4a3b4bbdd11719430c6bacd8500d90930a95a27cd4911c32b2605ae74f5c739c0b4293321aa17699a38ce210b9956b2d4b23ede98c7f0f05cfdeba2f044e0607a980f944d50a6ff260531c646472b08628223def4a352cf10be97222beac70e8b500879686d5317f2d790d4eac016493b4915dfe285008496ca2d954290579fc82c7202760e345134d12fd041689e0693dedfd4304c018f237e3f43b4e2aebc0b389be88e375d92357bf5101f64ead52499c70b66cff72aed466602568b956aba91bd379fa1c36de48b50aae06e58f8dab6f9c17aeff5c8ae64a8730217eac576adb6bc8a80a76eaf749642d39c9acefc5ae72c9aa4a287778674d633e79fe2b08cb0f51103e07694979712378af186cb849a5a2930dcc698ce635e1a7b568713afa4c983ad8278c2401794d1dedb4bcade0e44e4f4e4a7e5eaa4573c5c3c564fde521b268daf7961b5bbd91f38fa7918d11c91094d09d1ad0d557fd73b2bc0497a65b79038878747669cc067cc56449ca9185e65e6f229a03e250e1e399735bf3de3bcd89083d9372a7bcc2978fed6c7054eac3f8ac5d034cb3cbd2ff91b632c79160b2dd95d074e3cc3b0e45fe86e99a8258f70362ae72b892a11fdf43fcb8bc29d4fd56294caae9a90231c848e0cda461ca8c5bcb7c691288b0b22a11503746071814ff22560b6c1301dac70669ad9c513731623f059559a78e4ade70b04a5e568c8d24ac9c9402fab91a2474b243c91d850343f886417cc35b878b7ba76b6bbf3a1fc4dd3ee8ad1db16ec6f5539e8a0e7e55b0450171cff45d660b2e1801b0e29bcdeaea9e3f39e9d0e9f275dc5122e790d820aac06fd1f90eb7d4020ff2cdd9ce9a27ad14a9867cada80a0445c69a3923300b1fbb2bd5d1511b62ef626f8b5ec39f87d508c627e6f30a774ec6bf7ee0c8c74d980d0d712dd6c0109e9797ed6a98bfcd679fbd5769172f44b017df550580aae70986db5d56effabbb5e73bea2119dfcc34e2dbebc6e04d2143d6b1491a27fc4d5e72b94dc3fe2b3642456294c5892b6fa1dfc97c108cc73c0b7a8d25434a1dd418148eef604e5005b2c71d375bd91ba73b635c54aba885988bc3fae6cf0df98d965b71fa622021d47b205b5e9c96801f79d6cef68671616c1a0953db08d7e81f21682433354dd2ed724cbd7af5d626602630f9bb3422972fb81ddeaf23ac4618136216a6864c0f63f0a0e41c3139a117281409e9421c8666ec6fc73b727b62a8f416a090bc5d555e72767fc0e6d25e0932acdf2c4f1f6e0917ac0f506fac12eed25366706c59b9cd3cb2c4a5a09230a2442f29692fbec950b83024a8b67a2c906b826f93ae668be201b5af85b07f8432607efd45295c6bc01ffeb1cd7007774eeecfe5be3ba7c4e6949ec99085e7b0058af2e560098596bb24aeb5b67e8881d8cda42b7c47e38c58f23e421f85f627b2a58cf85a2a6e944e8b9c619f8f52dd7e55ad1ceff6cb87c895437f23bbcc6322d941441afc93e96ab448c5bd2929f24b9be3e957a6399c73bc524f5bf31dd60a762dd538350f15d9561fe90eb127386665bc89a04a7e0008e0027b343bb1d0f2b4a764115fa1718315346a02a2357c999e6990cc44c9a8020e58da8675924040e7ddc4bd422a234bb111008e3f3c83a40aa37cd48ab52a9d22185cf2ec3d97fd8c118c4f41564c2ea98dd5ac3579b3db62b4002277e792cb5faafdfd7751a2daa41509eb4057719028c74fe9a9e08aa4ed8c54ce9645bf5b228f8a1090108f4c56b5f6ccb2461e12ad541daa594d35491398641336ca963453bb9b1f4f3e56e9778afb959476283c6fd193479f2fdd313981e94e49252a4935c78783b86e1f11603199e2d044eccb9f468d994ab71ac295928e081928ca2baf17dd8a465498932b655ff9e36d75a7ee4a7793a510f2ee1f041c35878515c8a1735645e8cdce74c9c2103549cf168ccbdae94a41343e674d25a2c7318176eca3719306982254f66f6c60173ea535c30b6234e35d5eb261a90c11f90b151895976f8cf665659da9d4045fb0f622e5e2bb00c77f9e3255aa5fa2b7139c50ba3dcf8ea906e5d691dbf06c9d423ffe4d7f3a26e67079d9fa96f044a6c54996b6e407a88836bb07e9bc50cdb9a3ed054fd60832e0fabca3fe61a0bc2663266c135ac472f9be3d89ef79783c0193d2ff1a4e657864529a7ccfc16ce61daafb205829f21f5743c624613eb036c613abb5e54948e794f88a30bc0ee046efd589942b816a69d71381fbbda5b47af2978dafe4efda65ce5b12c82c653857e2a6dd70c667e53069fd89cdc3977b185e47a41bd4a0640213e698c54b2422e5b20700d198acd04bfda517a55718a892409f5b1aec2b35682ebc2f8a6ef0d959c30650da18f2155abd27003468288e7e44460920ef6eb5817d3e1e9dcc02665ea4a92ef72ac6e5373403316f250952c4b317b50ed4d0713a904c3c62702f448138e10ce7005bd815ad5c02b91ae173b502e9f06ce167f50736c8723eacf460cda1435918a271ee6424cc3753a18b732c0c67b9729bbde8991f2f37f065522e795f787a64cb7af96276dba43c5673d775d25e026db081f14108012450c84fca04055d596a1107d9d2f725081a7d13c3d713a21ba7a6d8d587133060b644d03d188d296223e337aa75851d9a68b2a4f033ec761c05ac36397878092d67fffc186467a86cce650a68ec86cc55b7d7ab55bbc7824bec9c37f25ee4485c3267ecab369a59c825459b4212f37511c81d99563853a774c582073d8dee6238f222882cabb4cccc1ee990e20cc6660bed1196c57693ee784584f5a1cf8276376fd6722ef58be5982bfb77410441296f9058e09ca498778742aa0bbd0cf90bbab41bc3ee84af0efe080279d782fe9b2e0fe880f8bf7d98663ffb5d72b5e4c3ff8cfe002d2a3fa9b774af6b4c92a00405c8cc55becbbc9e76c8e406a1dfd2efb59ed247b87d3a1bf5b851b7297977c3080e0d191c83a7f362a841193ab9ccb4c9077c1dd0e93a390e2f026b4bcf4550ba5030bd0d3eac5f297c7248b00fc81f9a692a1e8a0edee896752e9e5591bc3e2d8fa5af33df78125d5218adf2fde410fc12c5b8f245915017766d06a0c97166441ad71b669ece2808ac151f01116e053e3e2e56f038de30173a2d6837a68b7730fb899da08bf259e7a1bf4e92f6f25e2c5711347b777e93bf10f154409f74991b8f887e056f94e6ff845630e070c170b3de81323960abe8529f34c0667a34f93f23ddaa4233cbb82fed76b8fa55c01d39fa124ede9d69ac909005e194a6b81632249551c4e141f4b78b4421a5dddedc6776f711d6f7acc8857623bd1b4e3cd5a9d08046fcbb662a88d62047bf5f42ea02b4026de6bec7000c051a2f7e5f8603086a92ef4add50f4aca9edea046afe7d411fa35e376cb627c4f4f76bab26eb6c5cf0dd01935d6de05547f61fe05d92e08ff6de70b4393dd17d6e5af27fea22ed2b7925888f05e7acf8bd4f438eb3fad21d89ea1434f4c7304cece4bf95872f096df0e21f89ddaffb35c47067e0afafb8de2ff8a20207335f274cac273a18c24715030266f043f9c97f5b48e4b225e8d1cb837b33b4a0c85d0c45209943d3e5d339d177d86a8c0720aed4a7714d54dd6cec62ab0a55f6ff98d7187d59c4c0bbcb0a4b90d7c5728be2f11486a7b1161df0850897c44650c7da20b2038526e6064d6dbf5693b56e6e340a3082e1c9155af68ac5936ecbabc965328b4ff7c9befb70f9eb35fb2d63562d3f07638ce56222858f066bbf1a898608685b15397ca46f04460d75612af30a2defa9fa984b7d15a10a2e37967ece786299a6ff209958219bee9c0ffaf35c2ca07abe8794ab4b9eecf4a897f572c93ef6dcfa289a12d404b4224d47f853e154f0adbf3594cf5da6c972980f6d2e68c546716363c6f89deedd4784df2c827b1a90b140fa9e251f29bf59dbbcf5ab8194103fed62e8ae248c2ceca39fe2d182c9d009216522abb1d923116827681049bc1f5adb3cde18d9cb0d6876004c95484fe73996661050b61fe7221b7f0c4f43054bf2e369c74626b039800e869c33db36c65f77e3e4f6e757ba2beff18ff36157c1d43ff0e85bfd0e991a676fd6a19764f852a9434a4c89db356a0c3a1498960fe7be45e8f7339e7855aa255830a15c7e3e94ac7dba165b81d67a3e1e4c59d7bc90a4136616e68752bf718b753451e5f80139b9edbe80db42244ff10af5b8ba5c38a595ed05f3324fa6568697e1d2c2bdeba0c9e42d05105146d3c5ac7e640a0819e5a42be0babaca02b94f99a3ca9b491a8d688344238a7d7dd325f49465bf4d97ff0c337988480c55397f644bfa932e8cce8f30f09ca8f6a9b5d6b7d3d699b215bdeee1faa9daba4714f488b146c044f1e4cb421d8ec891aa3d61180354c8a77734e5bea12912fe35eb25826f4f480d85a73bc71bed2ef77cbcfb413b3cfc38430c801126b8dbbb918ca3c75c1bfb8105957bb13e3c396afafcc671c5cca12f3b10d003070b0755e580fae3ff86247801fb44ec9a0e508efe5d41ea9e8068379ff19832a3a01da8ee96d0d1d4bbc80bc7c026f5302b417edd8405f941df1a4a2b8c89b0b67c7b4b3c0f85ec37590fe89c400821d36816b7dfadc246b26b59cb2646b50261d2741597534927d6726f37f8c2e03c765ed05bd531f1e6187143fee2c18d881c9c44256c1ae220e7f0915fc85687a0dec5263400fdd074d615398a0a87f72942c4a05c18f6fccf0bb52b8a60d5f283b05850a32ddf2362b61a0b06b65547913aba7ca5d82e1d8d9a7e6f5959b82e83e3c053d25710a71b2ef1e4594c7309237640795ae31f5cdd13bd06cd416471a2bcd892ffccfab30cd8a5d81bdce0d259ca170847d270fc13070d1c8869d277e153be2aef7701ff0732438b706be5640c32c0bf8a0f0de4de1e79b72f9716d47d288af8d8d4dd8860c5361289df07b00e512d3adb9844f3db9bd844139dd4d0d3fd3f57b0b648499985ce69f6a6e129005571e16b620505f2e80eea9760d2c36f19bc534b8fd5729580ad2f00dc0c29f723feb18fcd60a72537fe6a44379bae4b08f8df68755e24d8d9a24cca055d448c941115cd8b8695b24799d3242ad46c242f5316e630dea37b3415bd446f0400d23d6b23525d7d78c72c526326941ed88bb5c538fa79fe22b1f25acb075965eba80c2bcca80bd674f216c21f7128dba3fabf1e362210bad730b4ac701c8a30466b4c9692d914c182655298eacaffa823f0e892a8b28434890067d0b593bc4e90180a66bc5fda9d836f567b501117a6ac80f961b8", 0x1000}], 0x2, &(0x7f00000012c0)=[{0x18, 0x10d, 0x57, "46896478"}, {0x48, 0x15, 0x1, "d75fb6b8a83c087f236ed7d8de05943d31b02c491faa476bf2ebcec30fa600e0c9a3efa37250458989f8056710376541e25fa74750"}, {0x70, 0x89, 0x101, "e805524895d1c04c65c884431b78fa4b5c31e88ae90a0d7f17f5abc9f47a4dcd471da164f96bdfd7cef6a468ae3a790579eda44db607504176300ec6f8844f639138705045e721a6f528f9eba5145b1f0aa284b9945de006ca"}, {0x60, 0x6, 0x3, "4c2af81f05e6bf5f7a4e190c8ae2e5e036d0f17cb3f6c49c3ac0b83823397f5e9fa01f473a5eaa643781e0a2c1247ed6290e4cead274d85e38147081b8b2603bd59d8421ca22c073bb9c5ba3e862dc"}, {0x18, 0x119, 0x3, "138318"}, {0x80, 0x88, 0x80000, "a6d472bdc6c4c471519b4f2b9609f40c3e31b75e8cab1bb35056f70183cf300fedad810d1d2980dda05e762df209103a1f6abf6d7d63d198fe711152865d3f15d307aef4c14965e669a29449a41f34f964c194d12a9bdf31cb330ed488d7162bf97f3fb5560739c5cc2f4f"}, {0x38, 0x111, 0x7, "1da429c230476474e19e94582c759a8fa2b588e1966dafed076260033934f8acef4ebef1a16d"}, {0xa8, 0x179, 0x100, "3d31ff508be38434bef8d3ef23e35fb1800354b47e4add83743792df9fa50744ebe574ce7480acfd79281c8941f696cc5733d39d0f4d3d7124a518067b66a117d4067dd715741edc3d1ce19c15af05569f2fd4d98d7b5881c0e1b359915369cfaac2a00edadcbc335afcd7f0623c0b77193ccc9c28cf24bcf4c859ac31389274b2c34f3b2f357bf0f2b7605cdc1f93177489c05631cac9"}, {0xb0, 0x186, 0x3, "f71e7a88b7e0cee923b1069c91c2bdd1966028f08cd1572bf45fcedf14642cc3896bc9f16fb266b2147aedd83787482efb35333123db5b4e9566e137d859cc70b96246a4777a382183ac3549d5e056d5333bd9a28481253236756245592bf716687fff28df73e6a0c237c0dc296c5665edfbe90e88740da00df63838de3b637a0100120072ad2137307d1ec0aaa51d7e0edce9bc45afd8e116"}], 0x358}}, {{&(0x7f0000001640)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000016c0)="615453b0b78aa46b92568bb8c967d95163740149af7a4154241f97631ed8671a029fa9bd10c28368afac2d74354b168c3740da900cca74e2a63b67b0ae8a39ece647861af53b1a24a46c107c43469b9662ef975e97245628139a7bedab98a58d50f640db8679312034ff8869382aab3c179972c3a07712d53d1510c9090643b914a7d6c452bea129dd78a055672b879cef1fbf01c169a38cdb4541395dcf70fa78d6d9b36e0ea20fa6c6bd85c89a082e34b85d92066f1b5c3e7bdd619dbc389f5b3b51da76640a02c314da034c6f8bad4198bae587f7cfddd015dd8312ebc6e9b0ca15599337a80a61b348b23067736c60a00e5ba2ecf320", 0xf8}, {&(0x7f00000017c0)="c4914c648b4f48cbe0bbe8d336f6679e6f60feb2ea4c15d39d8e3afedcfe71f530bf0e53bfc532e981f6adf36a71ad608ef9ea2f9aed9faef6fb81e72881b52794154d1f1d0a0f554eaee80790c4435016b5042969c0c0d5027376fbfcd7fefd64e513f05d3771c9741bca7e53ff04fdb7f822b2e259ed1f0fff426ef97ae030c0fcaddd6f8c53c8a73e916aca369af22f5c217bcc7a6ad8a08edc13e2a34fc7dab1cdd618a7a39b310792863d84f9bfcaf13d9e591d2adc754430cc73a606efae119af2332394863ca76b9bdee5aa44cfd04f23ebb4d6282912fdad39fef9470c2727cbda42a77af2bde0c44096325c81fa8d24e76c5cff5e2f738d7e", 0xfd}, {&(0x7f00000018c0)="eb37b18ca5a2d60254b4cee30989bcc826a40533044e8609a709273e3823f250acf7d40b52f8434e0b7cc99e78deff83f6a36c2f8af04350aa2b9bca72784d971dd4a9c311b0a51df4142a70bec45e58ddbb6f9d185c08450a63ec0c7f0a50449e489cfd8abd13718d8c17e28e5263b6c7cbbf6454d138bb79ee5d1fa37297681b8f603db48102ab2fd282ab1d", 0x8d}, {&(0x7f0000001980)="660c133a14b066e3d472b27310059d4aa0b9950d61140185cedca800b74fb4cc0b204c6439073f0233555eba99d8ffe76a6396caee505d0562ef765100722e7027d9bdd709cc955726b4b941d9f4f5734ed51309", 0x54}], 0x4, &(0x7f0000001a00)=[{0x48, 0x84, 0xffffffff, "afc4bbf901a93b5b616d9f85d86cb9516b879cbd46106e6dd1823344fb2255853fe0c15e006909c3cf2a2285661d66e3dda58f40a0617f"}, {0x98, 0x116, 0xfffffff8, "4debb228d5034ca76e8ebb8296e16956df55059ce4e1d4a52b26c100c784471623b1be00bfe1074aad87c222ea2a1ffbec6028e800f2362202e6a8c0a59dfa8749a090b100c88af4e1ff489475d51e7f2a86bbbab126e2c79050d3256206bffa2a542ff9a6b1b9ab2cd3ce3c6ab42b30442305b592bd7943375456b400a4e2fece"}, {0xc8, 0x111, 0x80, "1e11aa9baad1b31dfdd4b1ba9ed5b6e08d157824dc706d05a55d70cbe1a3ef6dd5b62c635d953d96b71e847774e625cf6f50e083a26b2c2957fc96cada7978ff7c0dc76b5e9532b0cee19ff19945a35df7efc5a4c799bc559f3a44283a33a934f077730355e43c10745fae0fccca36eeb606c85a6568c9737cb94d28fb940a1dc4e85dc4f465a5e6b6c78c3da1ea3d7c230550c33c5464cb576f52e3c8b3ac377911edb9fab312b48ec511d3694fe9c7ef"}, {0x48, 0x1, 0xb7f, "55b779a94d7f8dee9c2dca6603d2e0833e37e205a96f6dd765e64df15440dee8f0fa0bc9d1aad071230dd021786f8a2babf7d951438d4c"}, {0x80, 0x10c, 0x59df, "bbe2947790112766f73c6b14e47183657cd4664ba27b1c77245106f14640cac9f927879f3f88507a1773350afb810fcbddc94069af482b2f8915be86de647db2f584283908d257b3e67ea685994ce046cfaa60c8880f887b77f180b006f4c1de1501ccfcabcbf03bb757ab5b83"}, {0xc8, 0x10d, 0x3, "38a2053f180b02bf3e5be501e3b227a343ffc6494341cc89a357c59ea10148246712150da48ee8aaa20e094cc3d19cdaa297dfea09327759d24bb963bdd684b8e8973a87b6cca495ec64ead4e9db065133bc44ebd5723afbf63832b5c49f7971d4928d631a20a138e4fe740abb46baf31c7a02dfaf754222ed8269d13105151bceff32ad16d516d53ea4b53569024fa1ccdff6483d92f824eb0d4c93943f1b05086540d1e1e903f0adeb378e18728443adc8f77769"}], 0x338}}, {{&(0x7f0000001d40)=@pppoe={0x18, 0x0, {0x1, @remote, 'team_slave_0\x00'}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)="27b254eee27fd327298b6383dfcabf2bc1624bd5df88217ee0773069339658a3aaf67cf1a05e7ec65dc0421a4ca7613d1b6ce6ba866fd2a2083cbb1c5a471830391e2bdfd5d643c3104e2dad892a0f885ce343e1c6122a3aaebe6d1d793f49bf4f94f401ecf84f6fe3e7160058b96b9b7ead4f69a8c6a1620ce103ddcb891ef9aaeb5d2830f674313532c8b46171756cd36def52cdb448669554792e504e099a5a98bfeb9dd79c7b6706ae767dcbe03d26f2fb2053d8d512b50dd6e52eae", 0xbe}, {&(0x7f0000001e80)="2fdbe7367c85bfca27ee384f1b7505333b1fb20e85279134bfe7c1174c00b73b45a378fce8c15ea61fd7e9e97e09c3efac5f1ac39c746563d8838bb1e87175c1d7e5c58f4c2efd7271a2087991a679106b3fa058f29751f022d9eb1cd4c75ccd2e1e2d69561832a5466e6cd5477bc9270f735157ec00f9e3d5e494213eeea108e5660e4225ae", 0x86}, {&(0x7f0000001f40)="532e516443994004fbf5203f868cee3fd8426c100873050fd8c80aff1afc9262a4ebc4fed895a096639f62b5815ef85f5e078108bf5f5d5cc35036a5716d5247985a88270c10c12c2bf6d63ce73ee76ed5cdf4797c782b12c8d553b066700ad85440789390d623feef85893fd8e49fce19c4842259c8e8c800056d16aa72ed58a4b5cf", 0x83}, {&(0x7f0000002000)="82597b944bf3520a78b2be29bf05e81a9b209f0987f8612ee3677b2badecbf3bb3317dd52ec1883bcf7bb1654d039eaafcd3aad3257ee32f598053856a615db497ae594f96c15144184171d5b68f67bd4e4e10f5d6c1f5e7f3bd02d0345966bf80b83c6bc1fd963337aeacaf3db6317eb9d4fbaadf705e843c909edc0b8a36f4dcfd038f2f6f76a88d71d139def0", 0x8e}, {&(0x7f00000020c0)="94f3de74f366af1852c3b70d2b3ccad650e4b7512b7efb74c3cbd7821ca2828c1d8704fee07cde1e3b79abaee346dacb441749bf094779a90e63f3a2a058452eec0b00cd1afff78d141b5e", 0x4b}, {&(0x7f0000000240)="d9", 0x1}, {&(0x7f0000002140)="8fe77eeb142e77f6cd7fc153df6a18ffdb7dd8aebbcbb5cf717defbdd7753732a8cb0f78b654f035703eee318c79df81ab8abf24873c40671f9b3571bc878a726dbecf5ff6825d96cc7ab68719d3731d1bacca3cf0427ef12f302d41c49cf7f4feacfb91983c30658134818ae4e373968fcb1c811c6c077ac1f02b959bf86e011f7afe5329a6da7f1a1d3411a10424313953835c3d520f97962d4779202b19efbe4754d5c25cc01c4fc47dfff7cbc1c393db5e6de91a30794bca846a33d68b354bd10c4557d2f23edf8cd48809f9f47e4e0e695e2341e330a01efee5c992ff6edff0feda5fb402cf9aea9c844ec03152596f6e63", 0xf4}], 0x7, &(0x7f00000022c0)=[{0x18, 0xab, 0x7, "e83338fe8f027b"}, {0x88, 0x0, 0x8, "ceb86291ff36a61a2abc51793d4e1b343988694d3d7ccbfdec4bbe974bfef2b8a5d658e772fe0bf6110d5c9917ad9dce5060c61d243f69cfd69d0f5f0a8caa17c2f8a65a85afdbbf5b4375518af62a8d9dfd6114566d7ef1e1e635b916100c3d5e07e1831d26f9ce2a313ac6d84630bb98788817db"}], 0xa0}}, {{&(0x7f0000002380)=@in={0x2, 0x4e22, @rand_addr=0x4}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="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", 0xfc}, {&(0x7f0000003500)="d363537b03bd2cb6516bb81d3e14b67d60fc4f23eb3af21916da05ee8b738951269981a8c8e9435de7d9d41cfab7bce4ac7299d7c2d1afeefd8d49c19b44eff3fe118cc7fd96caf2f02ca37ae63a2f17a5cb13922fc993a894b4010e97f09cddac0a0b456346b1db3db50e4dfd3bf11b28158c2e0e7926feac87", 0x7a}, {&(0x7f0000003580)="75c63c101f657c97d5cb1eb4aca7e9422dd55d993fda38d9ca07632ad9ce7048764e0b1e6277550cdc04c35173ade532dd569265b37d6bd406c6970bd8e60347ef5c2a1003fa888abfec9174ba64636d3f8fea69e856f22d2385ef4590a943389bcf749a00b378cad8c293037b176419535417ecdbaa5afabf3bf38ec42ad1e99243b5a1ad0dbb73089bc04649006a7b898fd77fa34224e2748a8d73081223f4851af596aae9d6e7a378a06f85452a27170ba96cde728b059682fd", 0xbb}, {&(0x7f0000003640)="dddd1932a249e5901e2dbf657c3481c847c02a2c1e71551be6d0a457b66d159398d9e8632b32d5c64a6a843eb4840d082d8b6d35845ace89968f060daa2122876838d9fc7b7810", 0x47}, {&(0x7f00000036c0)="2702df8eb32b318baf70c924be1a9191b88a282e1c714ffe8f03900d294d3d90813d4e9a62bad292a673d3ee0ca61180e090b2eb33f610fcef49621efbf173c4be52e4d6b445f6a64cb70775737eab21421019ebb28b00e1888c946f530b1cd5b5ab3e18611e48b1c2a4ddd69014b91a", 0x70}], 0x6, &(0x7f00000037c0)=[{0x48, 0x10c, 0x2fe, "8c8cd162867a4ee03cc5836cd7407832277cfdd37bdcc9aef9c45323d2bfe91abb8e6dd9f70e85e57e1dde22c112adf176c68fd753"}, {0x68, 0x10e, 0x40, "4c8e2d95adc7304ed6a5e6a291a2878ea50081c5d11fa4fc5aa8222532d2ac8f66c42882f8b2855c9e548e8afc94a015bf5c1edc77527fd364f484f63e8120f5bda8ed11e7df8f1f16ff6dd874c7767aa36fdab08517"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003880)="97578a2ea6a95b21bb7c07242ad1029b7051c32f8320ddf951095831bccd68f981f34bee0b7277aa2a00edebbdff6c975a006c6d89c727dbf01680ec61c5c6939cce2eb6e526d3498ce5e6dd18d518e6d266be00cec33f4de621961f95eb78cce29f4535196d567e428d3dabbff9ae43b728dd91b69cd45d0e040ecdcd393dd03baeb7c111e5e62a6e09ed34e90ae4cc15f785e92f296e8d6fd95da81121593a252b01468db36b82add71b444cd508cbf35417830bee3b3b5120cfcc0e1deee70c0d2b176525a3c3eab3932e89cdb1344827", 0xd2}], 0x1}}, {{&(0x7f00000039c0)=@nfc={0x27, 0x1, 0x2, 0x2}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003a40)="02d059e6cbd41c9b5297068e7d30159ff59c4a81361f35f1a29914c4f69756bb7f131791e86b7040ed5ad97f226c250146d8afdf0bc9fcbff9b3deef668fe01065dcdef0ef62bacc4869838395699a27efca4bb297c9e5afdd36ad85416c82ce0b158fe237e39a5d3246f35021871d67242bb237d3b9640d32d3bccfe55f670126d1811f6edddf8f8e97386948f2074b8f9095adf3395e7594982c1052082f461fe6b9ebc8d11c3744558139f24644bf9873026c0215c7b929c605ba82468aabf8ac301dc7a104b209e98e8b23b992000a1ba988e9b828e0a3556e74b58a315d954f7af52f5f3e34a8", 0xe9}, {&(0x7f0000003b40)="7f8d98ad5882ada0701e62e2e6355ef57d973e5e73dc20ceec81a79a723c967f17ed71d53047707b51501472e8e0c59c3c446163769a82ec13d9a7c397a31ada95153b521628353dc4ba1800a7b1825b78d4f1829f9b673adb9f6a127f55d1ba67b90fb3745a61d42e7182af89f156956a75f9b93def3824275e3f60534c115e0b5994df78876b617a8f6dc903dca2140b9e8f4191f62e4ea8257d949052b0b620", 0xa1}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="ac89c3a1400b8ac01cf4c4197fad80dd7e7579fb5d0497", 0x17}], 0x4}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004c80)="7c36b5d3ba6def18444a6ef0ac581bcf92e5d051efc749076cdcf3ec1bf03652e49c7f99eb7e30f05cdfd8b9cd07d0ea1cf61339e77e28cf1a5e98684e4d5a4f28f9eec3185f283db7bf53040e9c7938268a6ba1650e2071de13a9a5da5a5cc4b6b68930b3b80dd719a7235df7", 0x6d}, {&(0x7f0000004d00)="53ff9468bee3662fd0689c576efbad9a4f9aaa32b966ca4dd5420216c71abbc6eb9594f0dd3a4d7df26fd4c742cb71d12eb20b4370e06407e57b5e455474bda1c269013ad473147c79abb6d85b4de37f780b21dbc5238931dea5cd4eb753089b482d6cff95f471540e7101a77c97ea35bee7b39fa0b25b0419c8258f49b7b0bf31146c96344ece1c9536aa3ad8dac083b046fbed70e22710234b829572ea6d27183a49eae6245a04822e2a5d3b0d0e0568e68e6162578cb33d93415daa86c8a85c697136f5", 0xc5}, {&(0x7f0000004e00)="55624c278a7885655be60349c7eddcad2d1ec49834cfa2702c1bc458c3275d012c05f0d9c3bb972dd222655c76d3ef865250611606c9a76a6c0f686e3a9fc146153a5a06d01d34fc0b0695d7f3fd4de87e25a05449161f46e89c5e58fe8345391ef157cb492b7bc51ff20c76b8d5dbfab14fc557db027a749f6df1cb78f947a7f5235407949c3878d358b16b5f5b1ff29ee5ed81810451eb8d6fcda1a202f704d3859391402c5468fccd3bce7cd2d2611fc5e24aff2aa9eef2c3e3f7cb0cf02c05434951533fa0cfa0b9fa0435", 0xcd}, {&(0x7f0000004f00)="e2eda5721897fb4a1e9e9b391d94d760024b6668a1963df85bef6b895d6ba3552d9541cfc64c913fe6ecab29cdd008ca69857e1c13c5e6b4bf08f335d836f0e08d7257104009250642da5b7c4425f1739bebb46addc53c1ea7e2ee7fc5b340a14b9bf69c31de8b2a13a3735423bfdb5c62463d7d063d1c8c07eba954ed6b8f1d26eef3280ea10751f31e3f7c551bcd6747178deea2a3654740d66077b726c0fcf872f56568c363a2508b947284d846ba0e5bf49fb138c6312b299ea58486d1604f18814b0321618c7867c06f4ec68bef5b3b3c5c7c2f9ea18637a187086c50cc47d59c5aabfbf340fe90bd1908", 0xed}], 0x4}}, {{&(0x7f0000005040)=@in6={0xa, 0x4e21, 0x8, @loopback, 0x1}, 0x80, &(0x7f0000005280)=[{&(0x7f00000050c0)="11e16338a2f3cf774a7c5a9898c600c0fb1674563f79605da7c6b605cf9a1dbcaa318625c7ee007dcec0b1c72f3dbd66b0814f269a8b4cdc28d421938f14c7d3c38418c82c9f2784a652861638ad2feb008dd64c3ec8cc5f6c3515bf1e8026544bed5459f1ccd4a420b8c2d076f831aa40e4f310a105d6acb07318efa4a3e704cfe678f678229e3a4339e58073157da094066337f668076932c9fa850bb0c1bd44149263052f249e1527ed02e94cb921fff036c4b5e70a45745e990b7072fb6958a3324093", 0xc5}, {&(0x7f00000051c0)="45cde79aa91f5169381e6d920d3eb46d9cae0a14fb9085729c76873ee48f9f0a4da56fbd9ea0e58527c113330a0775eee4c40114964b692690e59b4491c97f4d1fd709f9", 0x44}, {&(0x7f0000005240)="3afe8ab4bbe90d532b963c1b408519480411e6a3e323e11c6354ab99", 0x1c}], 0x3, &(0x7f0000006900)=ANY=[@ANYBLOB="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"], 0xe8}}, {{&(0x7f00000053c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005440)="e19677a3b36cdb84aae988b321f26ed8f30cd53e5111bf117a9f35221400d304ce8fade3e73f721a5e69876ca1fc3ced7ba57ae8d7cac7c593a71fa3c02ccc3abb6bc1de5ba1ebee48d68d27edd307fa4443ccee186a1032c5f8f900f83d1495cfac6f008ba6656b09a7fb7bd60d6cb334947a31034cd21f1032a126", 0x7c}, {&(0x7f00000054c0)="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", 0xff}, {&(0x7f00000055c0)="3b090c57d50f02f43797365b26f6aacbcf56a2c010ce00ebc109e799", 0x1c}, {&(0x7f0000005600)="891e5c1ebd9381286b", 0x9}], 0x4, &(0x7f0000005680)=[{0x1010, 0x82, 0x665c, "1cd82d2739dcdccbc57fc4d13b5d4deb4412baeb4193385b4311547ba1064f6cfd1ac47760eaa2dafadd983f829cd8136140460dab04d1339cfac7d2919de4d06eaef330483e253aef3dec8ce0004ff5c7dca7a26ebf21306e95ef99ef0001fcbfe33b7d1a2b2b16a38890acb3ea7f82cc059194176763fda9f04c9952d59d24cc8033ce1c0fe1e2a4430f08899fcb088597143f1648532e07b90f0e313275c4f3157d937dfa6330145dc26fb6925e4c2c2f025f75aacda5f0dd7d4546d2ba5d2ab475b51e809aa34ee6b80e6049ce154c912866f29723e0d71f9aa3aa13da58622761b2158cadb144abfe16d778e8f7baa0cccf4c560d7588cdc54720646768c88b8f68dbb0a9f7e4aeea0117ac314044898c61bbb30ee018979fd404dd83ff264418c25a98a7d541cb17b44dba68c0d2808125413a5ff196a81fbe68972c7a9a4bc2713d6a81716e41d9d6894cdc1e90d4302322915d2415137e75aea87e08d82fc8b3152fb8f5f07589c88db5993586c0b59f25916a955d5f1553a60fd837cf5433feb91f00838c71761f5c51826ccf0f50386e715400e5499fca831c73d22255d8e1efbda55c4b171440d42afb365e87fd7fe8afe88e2165c9e623eec0812bbd3ec0d9a9421f2a0ca304aecbccde86c1d3e2a93f1319cf202252bae8a844af4439321c969cc0738cf4b461e86f9859140ee47292342fef097809c102b2a9212609a15ea0352be1537463df698e48d8af19621f97bf1e9694a4ac638bfc857b2fd6a89dc4c066b52899930b9c13de251deee392b03b68e510cb027557a201935d890a449e581c8418d08b25d722a373337a021ba9a8caf066b18a8cf383f8f7bdfb6900ff5d22a3d9e5bad2fc94c31a931a0a464e8afb0745f12acedd2296504b38158ac76c6573f69f97ef7f2339781561df028b529c7d534307bc4022f11ac33f997694ab433ed2d580cbd2123bafcaf846a011ed13f23ab10340d526ba199a0517ab14c68b16b1127cd1a2708d87bc5155283ca6eb0f76a6f6d94bef985fb98feff28a22b85ddf28acf286f12ddbc4834f7b6fc4a37a839a26e6d7ad63aed6a88bded6c2488db2782f9b204fded924867e4c2c4626085e98bb369ac6b8fc4d6538e2b93b0e054ea205f631a04816a495c83fc1a5978550cb43a7e5f4760686cf03703f627f14e427a37b5e4f5ca25f2dd6605113e0e94a5ff1ef8d40ea2e039b56b2c5a08c78da68c937bd34c781831fb71d0fdf75b942ade99856fbbb07325674a3ee23ccc61ef93ee5369df417d2707a4fe9b9030d92b5072e1cf9be853a879f4984fcc1de5629cc54985fb2c54be7622ad4b8c057bc48842949daeb6a777d0d755806dd897c033fb9d90bad7bce3a2aa915a924eb2c05b88ca9da3fe1babb0b7528c0335c869502475cb8bfa8aff2fd61468b0701fca9abc965591382b4a5730c20cc10bb8ec46f50e20d0bebab55903bc664e4ae56999b1e5ca27a9b17e55f278e4b7033ac63468702794c79d0300f77f6d30b2e28a15dee9e75508c4fd7b25fdc8219247a042d2c177e4d8a156b4296a46f52888cede8a52d077082ab018b77967cf4335eae3f5a7dd5199a4865baed71e337201d87cb543442b0f6572cbc7bdd75959d53d6b885ac3520d8f516e825de5609dd92216e9688383051a1dcb518a8053e1bde1ddadf50c06df1003da248f14eec2890e1b5c0d791566fc1b5e86187f75b993c771b80be0cf57f8481c45b00540d237aa7d11cdb705cf9b3e4c4f2157b1c1a8ac4f437afe353554299be97c8c53d869f8e52436a4dd282e74868910d8ac9dad77c757ddca008de7afa4584f934bf4a6c910445779d27a6f0c301a401527b95c0d26a3e8ee92937ed6c0d9cce795be7d9a23c92769bd80609c0229a99ae31ea56d493e4dfcb5014109f5222247ffc9dbfa0eb04da7b2c2432a0491959edfd0400bc8909f40be094092a4eb8bdbd8553cc1ae5da2036d16700804774297fe986c3227dfcf57d59548b206c7e2175fae669977d9e7a223ca7a8f88628885e6aed04369dcce6e4da907f773d062b88ef897bcf0d67203bee708d56f067e97dc6c690591973f49e12d98e78d2f740fdb19d47250f717c791428d5f925b27fcd1b2b1cb98d08b9cf882e6a2e34adab1888afcf91f211316e688edce2e3429389a394b06ce2eba21c131d6a4a733d4acde186225ca6be58c70b7f5c88709e8bd7bd3b4dab4ade512418f6e01a6c164d263da79a795e1319cecae3f2f8e2355c01d6e17ddcea994a364388f806216925a1b02d94019df93df34e05ba83ab73ee343b8a612ff0ce12e566d87ac3dc107e3d9b539e9cdae6ab6fa6f8796852dd032ef031b612a1e8536dafa2970ff83e4834ae112720101c724509a92c3d7f48003a9975ea96c4951cc7ad5112ea8e2a97dae7f7dbecdbcad4566786920beed48320bb4d37ba2a8b3c39d637d54744624b209ee34e5cae4db5a59569054bf4af6cd69b0473ffabbca79c52093fbd1f040988aaae4d8a501540ea21290b1f46dcb3e93467cdaa7143d19e6068cb7e2bd49180b13376662cba7cf88bd5d252abfb34a5671dfe3ddc64cb4e46900120e471f398fa38e21fc7254fae1eccdaa40c81926a40c86c8fb10ef76c230d7db090aafb9988766fd02054e61db92bd161982ef3ef7b87aa097f7a9a45d1c9ff0008a5a7ae7fa81b6575676b398c569b7b67dd62f9d35c2608db69cfd5a69365870421575e15cad3f3a518832c74b862baa992ec791e04e5bb05efe8c3591a487e5fa3c8fcd75915d69a9e1049ece0f25c04e71895dfe8b465f6d0d6b5eb70b1e1c3ac91087488681d954ac10ea0d6b81dbc6de234a76106cb58a3ca0ffa208a71c9152467bc049cf19e25dfe344fa02c5e6a7637475aee4ea5736f91b7ba0a148257264a273af37da12917fc00eedbebbe614525847428d8fd921598ed21a4da449ecf9e643ae430eaf59dedf771c8926d3633e0fc417f1702881f5d7dd88fa0e52b89a1b19105a5ea1e27d5ffa00ef60f323339e2e38e252bbc370fa3a2375459fe2fcd5769ee350c8d841a5c52d51709e937c65eacd536644c78c832f6c710792b503a0a16ed5851cf4379ab8988c47bc60232d4093a7bd8cef4ec7b56dbf8424cf339ca7b20683b442e237c8149df4f14ed80386388806a4ac84762166a3ce6c8225b3e87d848e4ba13f7dad65d903bec6da81392a9a0905e8b871b138e5b05b04a19045ce8116e8cae9d4b8265e09b9c94fbedca79b6086bbed8c3557e591f07e824a6c519bc0b52c8d61a20eab8f1ca99320f0ab6a61664fca55f7e435031d3135f03b959e3cdd8fc7eef8d7654254b6c294eab6aeefca57f630e9b6daa82bddebe8be11a24285686c1601e8a741eb05a2ce82e6bbcba27280ddc8c67e1a3584a4e5d2a49e0f0c37bcfbcf0d762140d48864f374dbc0b494268835c64e36e2922b779dccec1b8b9475aa4f0a117e89241f44680dfe869413615ba736481df1b7faaba3af63c711730c07f287cf58b318beaf2451bc85fd4e87b300c814a59999fd57aba29efe6e0fe510cdbde10aaccf7bf80f0f8660f81a76e51113ecdd251525ef4c0d1d402288152c2a13f38e42477ec0942b898605d08e42ee01a5bead81c62717f27d35fe9604d96c27b3e9780813613220b691918ce178d154f06f3caeb107a859c8ffac275d6b2baf01f2700065dc514161f7e0a89ec10e82492f57791e7f9986a84c14a93b3a2beb7cc0508e516196a2fcf9787e84e8b7a231cdb34fa8157eb9c1cd5d21338fca8782652f88dceb276034773165c68e161db2c00d3abacb1237828b1993749da4bfed219920a1f08e8f3d149d806b52324a186336243f3955c26c9f6811735c5b96973c41255629e386021e8b816d472b68cc6e3bb0ed344d08a2845e3ff44ce15238b23816ffe724ff08e2c5fa93157d3fc574c0af6f1d67e595a35430b52f7e9e5aa93e48436682f3caaa2f704fca99ea98185e76e425729baf3ec9e80756568cf5970d86844c5fa0f822e2820d263f0ff5206c9ebcfcdfb7af0132d0098fdeaa58ae361630eb314362cde864990ea410605cf61290ababd35849c2c97d57e86d8c02f9a737fb2634e72e0701357092117c6c3ed2d8bdb33163b12605e027f762324e76477099c0e81b271c28762a73008aa09665781880c69c1206f853be657c5f0676d0cfa482c1264ce20fc35d547f6818fe85095f0230d1c27d0a976c3bd98b0369d8f3c120108e0e12e9ee3b22dab1ccc0e50a29ce81950e55477d3d54a1890d42c314e0a929c9571984c829132f881b45648e9cb4111b94763aa5e31f8ebd4e98dff4d82a656b29b6b58b5c66c7bb4c6138f3e616e5bbdc1d3c78425168424c301d2509762f21ad8d519c081e6a328f300add30effd9e6632c893dbe3211aa2efe796cc0b6517a71ca9b61ba3ca887dc45b057cf84f838456fd91c322979fa3a474d225d7355a5e1a500c6c588d2c3a84bfce4feda46ae5c50cdba19846fbf57552330bdd69c3f43d087eb17be7d26efc284e18f288e8c74f7a93a1da74f2faa0fc42ca5ae1bd7cbba5ba6241afabb780944f682b2a0d3af51d4aef49d03fb8a650e7a002fe2a4a4102f34e0f6ca73f5312ed717be2ddeb304578b9c2a53fe0549dd0328903f9c6741bd5945a06619647fc8f27172bb4e3ea8d226de90051223be6541c2cf126b914e28dd82d38f2f473d8194a9b9704d33a2a11e7f3fd03fd71b762d66c1804475d8a83a4aa1ed77efc1d52721119b47fec819d7d5a571d6ba52ff2022ff7e06461c5dd101aa896da515f04feb1a1096cd7d1d935bafd74c6c508c28870c2f9b3f5a6c82badbbaffd1a899a45c08673234622a662f84e2439c0090c2df0e6c74c68d3321bb18e666793324e13c38d6bf5c547975c5cd39608842c13805c5556d02ce88938b13bd1e90c30a8ed9eb22b7f4538fca2d0cdb1a55fb78f769d1358153c2b8edc00c53d7e8a7f0d9bd265af50502129eab141ba1d86c3abae5a970af913a670ecb94c45d645cdb551f9251500bfc8da3b10ba0dd86716a111e83e7797f3aeea76ec511950a84546564dfeb3a3c3ab4fc8b2b93c5ccc669a3a5a29a617bd296534c1a4cac4e27ce030580227598edbc8d845342b194210fefb9cda70cd04b5abb1ade37263cf34cca6134b8b579f07a8fc9ed8f72eba46372f631dcac022632e3ffc764ad5ffb8eed86e2c9e16ef6ee81a94f007e01a3f921074e1330074e22ac5cd2add55449d39fb2b8f4df914fbae163ccb30554f2aff5a79db34889f7c633b27e5505b648aa80bcfdfdaaccebeacaccf51df755ede557f22f81046d051a4552ffc0736642d077d1b08f91e2117cd2622fcbbb2d0be8beb04955aed58ced2a4d283afb645d5dc9e36425f5973a7484b60ac47e5d287970f33b6a2d1a5792a1beabc728d6db67fcd3bf5786db43d9d33462c09c0a18fe549557849f4a5b7fa5e3459f98f6ebad8151c3715d65c36e228d901851e61b3af6a3352c89b75636f23dfa7ca7216d137162650bd5a5a262294b2ff05ae4a2450f9973904a03a2cdfd63490cc6b06d490d2c668f005ea344a213dff73bc8c618f5bf07273fca1731293386b6e03fd6cb2a42a286020821260851ceb95838536a069f20cf3afbff20cc9bfd2a682b55428b1fb82470c5979b11d389bac1563261219cec992cf5296e959677f4ef9fef8241605961c576876b49da35436c83f705bf864e35561f154327eb489634ee51ed24e78708b1f35f02b2f78"}], 0x1010}}], 0x9, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r7, 0x3, 0x0) [ 538.707611] devpts: called with bogus options [ 538.765308] devpts: called with bogus options [ 538.964532] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 539.071061] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 539.089948] CPU: 0 PID: 6928 Comm: syz-executor.1 Not tainted 4.14.151 #0 [ 539.096929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.106292] Call Trace: [ 539.108895] dump_stack+0x138/0x197 [ 539.112626] dump_header+0x177/0x6cd [ 539.116532] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 539.121802] ? ___ratelimit+0x55/0x537 [ 539.125720] oom_kill_process.cold+0x10/0xadd [ 539.130213] ? oom_unkillable_task+0x294/0x390 [ 539.134800] ? lock_downgrade+0x740/0x740 [ 539.138947] out_of_memory+0x2ee/0x1180 [ 539.142925] ? lock_acquire+0x16f/0x430 [ 539.146920] ? oom_killer_disable+0x1d0/0x1d0 [ 539.152018] ? __alloc_pages_slowpath+0xca4/0x2930 [ 539.156969] __alloc_pages_slowpath+0x2251/0x2930 [ 539.161847] ? warn_alloc+0xf0/0xf0 [ 539.165614] ? __might_sleep+0x93/0xb0 [ 539.170006] __alloc_pages_nodemask+0x62c/0x7a0 [ 539.174696] ? __alloc_pages_slowpath+0x2930/0x2930 [ 539.179708] ? rcu_read_lock_sched_held+0x110/0x130 [ 539.184732] copy_process.part.0+0x26a/0x6a00 [ 539.189226] ? trace_hardirqs_on+0x10/0x10 [ 539.193558] ? save_trace+0x290/0x290 [ 539.197379] ? trace_hardirqs_on+0x10/0x10 [ 539.201637] ? __might_fault+0x110/0x1d0 [ 539.205710] ? find_held_lock+0x35/0x130 [ 539.209789] ? __cleanup_sighand+0x50/0x50 [ 539.214052] ? lock_downgrade+0x740/0x740 [ 539.218219] _do_fork+0x19e/0xce0 [ 539.221675] ? fork_idle+0x280/0x280 [ 539.225392] ? put_timespec64+0xb4/0x100 [ 539.229451] ? nsecs_to_jiffies+0x30/0x30 [ 539.233597] ? SyS_clock_gettime+0xf8/0x180 [ 539.237913] SyS_clone+0x37/0x50 [ 539.241275] ? sys_vfork+0x30/0x30 [ 539.244815] do_syscall_64+0x1e8/0x640 [ 539.248846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.254088] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.259282] RIP: 0033:0x45851a [ 539.262493] RSP: 002b:00007ffcda3cbf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 539.270203] RAX: ffffffffffffffda RBX: 00007ffcda3cbf60 RCX: 000000000045851a [ 539.277464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 539.285087] RBP: 00007ffcda3cbfa0 R08: 0000000000000001 R09: 0000000001780940 [ 539.292351] R10: 0000000001780c10 R11: 0000000000000246 R12: 0000000000000001 [ 539.299707] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcda3cbff0 [ 539.411211] Mem-Info: [ 539.413732] active_anon:1346559 inactive_anon:184 isolated_anon:0 [ 539.413732] active_file:122 inactive_file:207 isolated_file:0 [ 539.413732] unevictable:0 dirty:0 writeback:20 unstable:0 [ 539.413732] slab_reclaimable:16866 slab_unreclaimable:110583 [ 539.413732] mapped:52499 shmem:242 pagetables:23178 bounce:0 [ 539.413732] free:25626 free_pcp:30 free_cma:0 [ 539.457687] Node 0 active_anon:1946376kB inactive_anon:728kB active_file:456kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209496kB dirty:0kB writeback:80kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 539.512090] Node 1 active_anon:3439860kB inactive_anon:8kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 539.539049] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.574979] lowmem_reserve[]: 0 2580 2580 2580 [ 539.579726] Node 0 DMA32 free:39388kB min:36468kB low:45584kB high:54700kB active_anon:1944084kB inactive_anon:728kB active_file:124kB inactive_file:272kB unevictable:0kB writepending:100kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45776kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 539.610289] lowmem_reserve[]: 0 0 0 0 [ 539.614705] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.646908] lowmem_reserve[]: 0 0 0 0 [ 539.651083] Node 1 Normal free:53036kB min:53420kB low:66772kB high:80124kB active_anon:3439860kB inactive_anon:8kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18272kB pagetables:46932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.683303] lowmem_reserve[]: 0 0 0 0 [ 539.687342] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 12*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 539.703128] Node 0 DMA32: 163*4kB (UME) 641*8kB (UME) 922*16kB (UME) 302*32kB (UME) 6*64kB (UME) 1*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (ME) 1*2048kB (M) 1*4096kB (M) = 39156kB [ 539.720722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 539.731690] Node 1 Normal: 103*4kB (UME) 46*8kB (UE) 227*16kB (UME) 527*32kB (UME) 141*64kB (U) 22*128kB (UM) 0*256kB 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 3*4096kB (M) = 53084kB [ 539.749351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.759397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 539.768193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.777194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 539.788981] 563 total pagecache pages [ 539.792850] 0 pages in swap cache [ 539.796385] Swap cache stats: add 0, delete 0, find 0/0 [ 539.805179] Free swap = 0kB [ 539.809306] Total swap = 0kB [ 539.814658] 1965979 pages RAM [ 539.817781] 0 pages HighMem/MovableOnly [ 539.821875] 333229 pages reserved [ 539.825325] 0 pages cma reserved [ 539.828680] Out of memory: Kill process 16923 (syz-executor.0) score 1007 or sacrifice child [ 539.837637] Killed process 16923 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 539.887171] oom_reaper: reaped process 16923 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 543.990128] net_ratelimit: 26 callbacks suppressed [ 543.990134] protocol 88fb is buggy, dev hsr_slave_0 [ 544.000394] protocol 88fb is buggy, dev hsr_slave_1 [ 544.005550] protocol 88fb is buggy, dev hsr_slave_0 [ 544.010693] protocol 88fb is buggy, dev hsr_slave_1 [ 544.550275] protocol 88fb is buggy, dev hsr_slave_0 [ 544.555671] protocol 88fb is buggy, dev hsr_slave_1 [ 544.560992] protocol 88fb is buggy, dev hsr_slave_0 [ 544.566326] protocol 88fb is buggy, dev hsr_slave_1 [ 544.571479] protocol 88fb is buggy, dev hsr_slave_0 [ 544.576749] protocol 88fb is buggy, dev hsr_slave_1 04:32:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000880)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5531e04d55fb1c26504e3e4738aac76780b5c23636981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52", 0xd1, 0x8090, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a94625a3a07e758044d64ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e", 0x5c, 0x0, 0x0, 0x0) 04:32:20 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:20 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$inet_udp_int(r4, 0x11, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) [ 548.986457] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 548.999884] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 549.004790] CPU: 0 PID: 6903 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 549.011366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.020733] Call Trace: [ 549.023308] dump_stack+0x138/0x197 [ 549.026926] dump_header+0x177/0x6cd [ 549.030623] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 549.035713] ? ___ratelimit+0x55/0x537 [ 549.039595] oom_kill_process.cold+0x10/0xadd [ 549.044066] ? oom_unkillable_task+0x294/0x390 [ 549.048629] ? lock_downgrade+0x740/0x740 [ 549.052763] out_of_memory+0x2ee/0x1180 [ 549.056732] ? lock_acquire+0x16f/0x430 [ 549.060685] ? oom_killer_disable+0x1d0/0x1d0 [ 549.065158] ? __alloc_pages_slowpath+0xca4/0x2930 [ 549.070063] __alloc_pages_slowpath+0x2251/0x2930 [ 549.074898] ? warn_alloc+0xf0/0xf0 [ 549.078514] ? __might_sleep+0x93/0xb0 [ 549.082379] __alloc_pages_nodemask+0x62c/0x7a0 [ 549.087036] ? __alloc_pages_slowpath+0x2930/0x2930 [ 549.092029] ? lock_downgrade+0x740/0x740 [ 549.096158] ? find_get_entry+0x23c/0x520 [ 549.100287] alloc_pages_current+0xec/0x1e0 [ 549.104598] __page_cache_alloc+0x248/0x3e0 [ 549.108897] filemap_fault+0xcc9/0x19a0 [ 549.113459] ? radix_tree_next_chunk+0x43e/0x9a0 [ 549.118199] ? __lock_page_or_retry+0x8d0/0x8d0 [ 549.122931] ? lock_acquire+0x16f/0x430 [ 549.127057] ? ext4_filemap_fault+0x7b/0xb0 [ 549.131375] ext4_filemap_fault+0x83/0xb0 [ 549.135518] __do_fault+0x104/0x390 [ 549.139156] __handle_mm_fault+0x2460/0x3470 [ 549.143742] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 549.148750] ? find_held_lock+0x35/0x130 [ 549.152808] ? handle_mm_fault+0x1b6/0x7c0 [ 549.157032] handle_mm_fault+0x293/0x7c0 [ 549.161077] __do_page_fault+0x4c1/0xb80 [ 549.165120] ? vmalloc_fault+0xe30/0xe30 [ 549.169162] ? page_fault+0x2f/0x50 [ 549.172771] do_page_fault+0x71/0x511 [ 549.176546] ? page_fault+0x2f/0x50 [ 549.180151] page_fault+0x45/0x50 [ 549.183583] RIP: 0033:0x457264 [ 549.186754] RSP: 002b:00007ffe9716d340 EFLAGS: 00010202 [ 549.192096] RAX: 000000c420084780 RBX: 00007ffe9716d340 RCX: 000000c420039f30 [ 549.199353] RDX: 0000000000983e90 RSI: 00000000004571e0 RDI: 0000000000983e90 [ 549.206604] RBP: 000000c420039f20 R08: 000000c420084780 R09: 000000c43927eea0 [ 549.213858] R10: 00000000009b3266 R11: 0000000000000006 R12: 0000000000000000 [ 549.221116] R13: 00000000000000f1 R14: 0000000000000011 R15: 00000000000000aa [ 549.233941] Mem-Info: [ 549.236449] active_anon:1348216 inactive_anon:183 isolated_anon:0 [ 549.236449] active_file:11 inactive_file:15 isolated_file:0 [ 549.236449] unevictable:0 dirty:0 writeback:0 unstable:0 [ 549.236449] slab_reclaimable:16774 slab_unreclaimable:109984 [ 549.236449] mapped:52226 shmem:242 pagetables:23175 bounce:0 [ 549.236449] free:25055 free_pcp:31 free_cma:0 [ 549.277243] Node 0 active_anon:1951336kB inactive_anon:708kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 549.334088] Node 1 active_anon:3441528kB inactive_anon:24kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 549.448443] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.548338] lowmem_reserve[]: 0 2580 2580 2580 [ 549.553047] Node 0 DMA32 free:36468kB min:36468kB low:45584kB high:54700kB active_anon:1948948kB inactive_anon:708kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.588007] lowmem_reserve[]: 0 0 0 0 [ 549.592547] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.691415] lowmem_reserve[]: 0 0 0 0 [ 549.698059] Node 1 Normal free:52820kB min:53420kB low:66772kB high:80124kB active_anon:3441532kB inactive_anon:24kB active_file:68kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18208kB pagetables:47104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.731090] lowmem_reserve[]: 0 0 0 0 [ 549.734928] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 12*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 549.752539] Node 0 DMA32: 55*4kB (UE) 599*8kB (UE) 867*16kB (UME) 295*32kB (UME) 7*64kB (UME) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36452kB [ 549.768778] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 549.779726] Node 1 Normal: 79*4kB (UME) 157*8kB (UME) 256*16kB (UME) 549*32kB (UME) 144*64kB (UM) 24*128kB (UM) 0*256kB 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 3*4096kB (M) = 53444kB [ 549.796163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 549.805064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 549.814990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 549.860056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 549.868671] 272 total pagecache pages [ 549.909460] 0 pages in swap cache [ 549.930470] Swap cache stats: add 0, delete 0, find 0/0 [ 549.935867] Free swap = 0kB [ 549.938877] Total swap = 0kB [ 549.995906] 1965979 pages RAM [ 549.999054] 0 pages HighMem/MovableOnly [ 550.024330] 333229 pages reserved [ 550.027831] 0 pages cma reserved [ 550.054247] Out of memory: Kill process 22476 (syz-executor.3) score 1007 or sacrifice child [ 550.087756] Killed process 22476 (syz-executor.3) total-vm:73776kB, anon-rss:16620kB, file-rss:34816kB, shmem-rss:0kB [ 550.201727] oom_reaper: reaped process 22476 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 550.230307] net_ratelimit: 26 callbacks suppressed [ 550.230314] protocol 88fb is buggy, dev hsr_slave_0 [ 550.240470] protocol 88fb is buggy, dev hsr_slave_1 [ 550.245694] protocol 88fb is buggy, dev hsr_slave_0 [ 550.250825] protocol 88fb is buggy, dev hsr_slave_1 04:32:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000880)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5531e04d55fb1c26504e3e4738aac76780b5c23636981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52", 0xd1, 0x8090, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a94625a3a07e758044d64ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e", 0x5c, 0x0, 0x0, 0x0) [ 550.513063] devpts: called with bogus options [ 550.540898] devpts: called with bogus options [ 550.790177] protocol 88fb is buggy, dev hsr_slave_0 [ 550.795278] protocol 88fb is buggy, dev hsr_slave_1 [ 550.800401] protocol 88fb is buggy, dev hsr_slave_0 [ 550.805428] protocol 88fb is buggy, dev hsr_slave_1 [ 550.810677] protocol 88fb is buggy, dev hsr_slave_0 [ 550.815868] protocol 88fb is buggy, dev hsr_slave_1 04:32:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x100000000ffe0, 0x0) 04:32:27 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:27 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r2, &(0x7f00000000c0)="14353d26dbc94a", 0x7) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) 04:32:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000000000000000, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000630677fbac141414e9", 0x0, 0x100}, 0x28) [ 553.467788] devpts: called with bogus options [ 556.143815] devpts: called with bogus options [ 556.470124] net_ratelimit: 26 callbacks suppressed [ 556.470130] protocol 88fb is buggy, dev hsr_slave_0 [ 556.480252] protocol 88fb is buggy, dev hsr_slave_1 [ 556.485382] protocol 88fb is buggy, dev hsr_slave_0 [ 556.490638] protocol 88fb is buggy, dev hsr_slave_1 04:32:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000632977fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 557.030128] protocol 88fb is buggy, dev hsr_slave_0 [ 557.035471] protocol 88fb is buggy, dev hsr_slave_1 [ 557.040693] protocol 88fb is buggy, dev hsr_slave_0 [ 557.045923] protocol 88fb is buggy, dev hsr_slave_1 [ 557.051186] protocol 88fb is buggy, dev hsr_slave_0 [ 557.056394] protocol 88fb is buggy, dev hsr_slave_1 [ 557.407473] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 557.420923] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 557.426561] CPU: 0 PID: 22566 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 557.433597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.442981] Call Trace: [ 557.445662] dump_stack+0x138/0x197 [ 557.449297] dump_header+0x177/0x6cd [ 557.453147] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 557.458244] ? ___ratelimit+0x55/0x537 [ 557.462154] oom_kill_process.cold+0x10/0xadd [ 557.466658] ? oom_unkillable_task+0x294/0x390 [ 557.471264] ? lock_downgrade+0x740/0x740 [ 557.475508] out_of_memory+0x2ee/0x1180 [ 557.479490] ? lock_acquire+0x16f/0x430 [ 557.483471] ? oom_killer_disable+0x1d0/0x1d0 [ 557.488131] ? __alloc_pages_slowpath+0xca4/0x2930 [ 557.493055] __alloc_pages_slowpath+0x2251/0x2930 [ 557.498196] ? warn_alloc+0xf0/0xf0 [ 557.501839] ? __might_sleep+0x93/0xb0 [ 557.505820] __alloc_pages_nodemask+0x62c/0x7a0 [ 557.510503] ? __alloc_pages_slowpath+0x2930/0x2930 [ 557.515522] ? __lock_acquire+0x5f7/0x4620 [ 557.520147] ? __handle_mm_fault+0x1c49/0x3470 [ 557.524731] alloc_pages_vma+0xc9/0x4c0 [ 557.528707] __handle_mm_fault+0x18f3/0x3470 [ 557.533121] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 557.537889] ? find_held_lock+0x35/0x130 [ 557.541947] ? handle_mm_fault+0x1b6/0x7c0 [ 557.547306] handle_mm_fault+0x293/0x7c0 [ 557.551608] __get_user_pages+0x465/0x1220 [ 557.555874] ? follow_page_mask+0x1560/0x1560 [ 557.560486] get_user_pages_remote+0x1bf/0x3a0 [ 557.565638] process_vm_rw_core.isra.0+0x470/0xa60 [ 557.571086] ? __vunmap.cold+0x40/0x40 [ 557.575214] ? kasan_check_write+0x14/0x20 [ 557.579704] ? _copy_from_user+0x99/0x110 [ 557.583842] ? rw_copy_check_uvector+0x1f1/0x290 [ 557.588603] process_vm_rw+0x1cb/0x1e0 [ 557.592592] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 557.597995] ? __might_fault+0x110/0x1d0 [ 557.602203] ? find_held_lock+0x35/0x130 [ 557.607820] ? __might_fault+0x110/0x1d0 [ 557.612239] ? lock_downgrade+0x740/0x740 [ 557.616385] ? kasan_check_read+0x11/0x20 [ 557.620557] ? _copy_to_user+0x87/0xd0 [ 557.624463] ? put_timespec64+0xb4/0x100 [ 557.629170] ? nsecs_to_jiffies+0x30/0x30 [ 557.633674] SyS_process_vm_writev+0x42/0x60 [ 557.638075] ? SyS_process_vm_readv+0x60/0x60 [ 557.642565] do_syscall_64+0x1e8/0x640 [ 557.646570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 557.651808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 557.657309] RIP: 0033:0x459f49 [ 557.660594] RSP: 002b:00007f05683e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 557.668332] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 557.675696] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 000000000000082c [ 557.683354] RBP: 000000000075bfc8 R08: 0000000000000299 R09: 0000000000000000 [ 557.690969] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007f05683e76d4 [ 557.698392] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 557.706919] Mem-Info: [ 557.709721] active_anon:1347384 inactive_anon:184 isolated_anon:0 [ 557.709721] active_file:4 inactive_file:15 isolated_file:0 [ 557.709721] unevictable:0 dirty:0 writeback:9 unstable:0 [ 557.709721] slab_reclaimable:16635 slab_unreclaimable:110810 [ 557.709721] mapped:52251 shmem:242 pagetables:23252 bounce:0 [ 557.709721] free:24954 free_pcp:60 free_cma:0 [ 557.746936] Node 0 active_anon:1947576kB inactive_anon:708kB active_file:44kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209008kB dirty:0kB writeback:36kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 557.777299] Node 1 active_anon:3441960kB inactive_anon:28kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 557.805768] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.833805] lowmem_reserve[]: 0 2580 2580 2580 [ 557.838565] Node 0 DMA32 free:36468kB min:36468kB low:45584kB high:54700kB active_anon:1945188kB inactive_anon:708kB active_file:44kB inactive_file:60kB unevictable:0kB writepending:36kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45620kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 557.868555] lowmem_reserve[]: 0 0 0 0 [ 557.872459] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.897869] lowmem_reserve[]: 0 0 0 0 [ 557.901741] Node 1 Normal free:53100kB min:53420kB low:66772kB high:80124kB active_anon:3441460kB inactive_anon:28kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18304kB pagetables:47376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.930942] lowmem_reserve[]: 0 0 0 0 [ 557.934849] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10432kB [ 557.950618] Node 0 DMA32: 37*4kB (UME) 619*8kB (UME) 810*16kB (UME) 323*32kB (UME) 6*64kB (UME) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36460kB [ 557.968106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 557.979361] Node 1 Normal: 59*4kB (UE) 89*8kB (UE) 223*16kB (UE) 572*32kB (UME) 149*64kB (UME) 23*128kB (UM) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (M) = 53220kB [ 557.996996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.005907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 558.014648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.024675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 558.036468] 313 total pagecache pages [ 558.040694] 0 pages in swap cache [ 558.044605] Swap cache stats: add 0, delete 0, find 0/0 [ 558.053080] Free swap = 0kB [ 558.057539] Total swap = 0kB [ 558.060650] 1965979 pages RAM [ 558.064007] 0 pages HighMem/MovableOnly [ 558.067959] 333229 pages reserved [ 558.072207] 0 pages cma reserved [ 558.075609] Out of memory: Kill process 17351 (syz-executor.0) score 1007 or sacrifice child [ 558.084698] Killed process 17351 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:32:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 04:32:35 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 04:32:35 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) getpgid(r8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:35 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 561.090419] device nr0 entered promiscuous mode [ 561.097327] devpts: called with bogus options [ 561.183463] devpts: called with bogus options [ 562.137278] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 562.151110] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 562.156716] CPU: 0 PID: 22578 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 562.164216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.174338] Call Trace: [ 562.177037] dump_stack+0x138/0x197 [ 562.180766] dump_header+0x177/0x6cd [ 562.184677] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 562.189903] ? ___ratelimit+0x55/0x537 [ 562.193990] oom_kill_process.cold+0x10/0xadd [ 562.198586] ? oom_unkillable_task+0x294/0x390 [ 562.203419] ? lock_downgrade+0x740/0x740 [ 562.207904] out_of_memory+0x2ee/0x1180 [ 562.211892] ? lock_acquire+0x16f/0x430 [ 562.216140] ? oom_killer_disable+0x1d0/0x1d0 [ 562.220649] ? __alloc_pages_slowpath+0xca4/0x2930 [ 562.226172] __alloc_pages_slowpath+0x2251/0x2930 [ 562.231667] ? warn_alloc+0xf0/0xf0 [ 562.235320] ? __might_sleep+0x93/0xb0 [ 562.239323] __alloc_pages_nodemask+0x62c/0x7a0 [ 562.244020] ? __alloc_pages_slowpath+0x2930/0x2930 [ 562.249363] ? __lock_acquire+0x5f7/0x4620 [ 562.253636] ? __handle_mm_fault+0x1c49/0x3470 [ 562.258335] alloc_pages_vma+0xc9/0x4c0 [ 562.262485] __handle_mm_fault+0x18f3/0x3470 [ 562.266910] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 562.272680] ? find_held_lock+0x35/0x130 [ 562.278305] ? handle_mm_fault+0x1b6/0x7c0 [ 562.282796] handle_mm_fault+0x293/0x7c0 [ 562.287555] __get_user_pages+0x465/0x1220 [ 562.292390] ? follow_page_mask+0x1560/0x1560 [ 562.297010] get_user_pages_remote+0x1bf/0x3a0 [ 562.302302] process_vm_rw_core.isra.0+0x470/0xa60 [ 562.307270] ? __vunmap.cold+0x40/0x40 [ 562.311518] ? kasan_check_write+0x14/0x20 [ 562.315796] ? _copy_from_user+0x99/0x110 [ 562.319969] ? rw_copy_check_uvector+0x1f1/0x290 [ 562.325094] process_vm_rw+0x1cb/0x1e0 [ 562.329001] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 562.334126] ? __might_fault+0x110/0x1d0 [ 562.338317] ? find_held_lock+0x35/0x130 [ 562.342733] ? __might_fault+0x110/0x1d0 [ 562.346857] ? lock_downgrade+0x740/0x740 [ 562.352209] ? kasan_check_read+0x11/0x20 [ 562.356912] ? _copy_to_user+0x87/0xd0 [ 562.361210] ? put_timespec64+0xb4/0x100 [ 562.365295] ? nsecs_to_jiffies+0x30/0x30 [ 562.369474] SyS_process_vm_writev+0x42/0x60 [ 562.373902] ? SyS_process_vm_readv+0x60/0x60 [ 562.378423] do_syscall_64+0x1e8/0x640 [ 562.382564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.388299] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 562.393508] RIP: 0033:0x459f49 [ 562.396805] RSP: 002b:00007f0568407c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 562.405322] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 562.412697] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 000000000000082f [ 562.420320] RBP: 000000000075bf20 R08: 0000000000000299 R09: 0000000000000000 [ 562.427692] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007f05684086d4 [ 562.435087] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 562.463276] Mem-Info: [ 562.465782] active_anon:1347203 inactive_anon:181 isolated_anon:0 [ 562.465782] active_file:33 inactive_file:20 isolated_file:0 [ 562.465782] unevictable:0 dirty:0 writeback:1 unstable:0 [ 562.465782] slab_reclaimable:16611 slab_unreclaimable:110971 [ 562.465782] mapped:52229 shmem:242 pagetables:23255 bounce:0 [ 562.465782] free:25042 free_pcp:30 free_cma:0 [ 562.710139] net_ratelimit: 26 callbacks suppressed [ 562.710145] protocol 88fb is buggy, dev hsr_slave_0 [ 562.721749] protocol 88fb is buggy, dev hsr_slave_1 [ 562.727086] protocol 88fb is buggy, dev hsr_slave_0 [ 562.732382] protocol 88fb is buggy, dev hsr_slave_1 [ 562.796285] Node 0 active_anon:1947936kB inactive_anon:708kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208916kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 563.029668] Node 1 active_anon:3440876kB inactive_anon:16kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 563.111531] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.141752] lowmem_reserve[]: 0 2580 2580 2580 [ 563.146772] Node 0 DMA32 free:36416kB min:36468kB low:45584kB high:54700kB active_anon:1945644kB inactive_anon:708kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45532kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 563.177406] lowmem_reserve[]: 0 0 0 0 [ 563.181428] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.209652] lowmem_reserve[]: 0 0 0 0 [ 563.213515] Node 1 Normal free:53348kB min:53420kB low:66772kB high:80124kB active_anon:3440876kB inactive_anon:16kB active_file:52kB inactive_file:68kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18464kB pagetables:47484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.270157] protocol 88fb is buggy, dev hsr_slave_0 [ 563.275720] protocol 88fb is buggy, dev hsr_slave_1 [ 563.281891] protocol 88fb is buggy, dev hsr_slave_0 [ 563.287492] protocol 88fb is buggy, dev hsr_slave_1 [ 563.290443] lowmem_reserve[]: 0 0 0 [ 563.293130] protocol 88fb is buggy, dev hsr_slave_0 [ 563.293132] 0 [ 563.297595] protocol 88fb is buggy, dev hsr_slave_1 [ 563.325577] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10432kB [ 563.347871] Node 0 DMA32: 14*4kB (E) 547*8kB (UME) 825*16kB (UME) 325*32kB (UME) 9*64kB (UME) 1*128kB (U) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36416kB [ 563.364016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 563.375547] Node 1 Normal: 85*4kB (UME) 100*8kB (UME) 209*16kB (UME) 579*32kB (UME) 148*64kB (UME) 23*128kB (UM) 0*256kB 3*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (M) = 53348kB [ 563.393408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.403078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 563.412143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.421795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 563.431334] 276 total pagecache pages [ 563.435674] 0 pages in swap cache [ 563.439708] Swap cache stats: add 0, delete 0, find 0/0 [ 563.445747] Free swap = 0kB [ 563.449046] Total swap = 0kB [ 563.452202] 1965979 pages RAM [ 563.455463] 0 pages HighMem/MovableOnly [ 563.459617] 333229 pages reserved [ 563.463780] 0 pages cma reserved [ 563.467617] Out of memory: Kill process 17494 (syz-executor.0) score 1007 or sacrifice child [ 563.476778] Killed process 17494 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:32:42 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:42 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:42 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:42 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) getpgid(r8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 568.950179] net_ratelimit: 26 callbacks suppressed [ 568.950184] protocol 88fb is buggy, dev hsr_slave_0 [ 568.961014] protocol 88fb is buggy, dev hsr_slave_1 [ 568.966557] protocol 88fb is buggy, dev hsr_slave_0 [ 568.971867] protocol 88fb is buggy, dev hsr_slave_1 [ 569.520138] protocol 88fb is buggy, dev hsr_slave_0 [ 569.525459] protocol 88fb is buggy, dev hsr_slave_1 [ 569.530980] protocol 88fb is buggy, dev hsr_slave_0 [ 569.536467] protocol 88fb is buggy, dev hsr_slave_1 [ 569.541637] protocol 88fb is buggy, dev hsr_slave_0 [ 569.546885] protocol 88fb is buggy, dev hsr_slave_1 [ 573.262511] devpts: called with bogus options [ 573.277156] devpts: called with bogus options [ 573.299665] devpts: called with bogus options [ 574.415501] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 574.428842] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 574.442573] CPU: 0 PID: 22606 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 574.449634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.459204] Call Trace: [ 574.461801] dump_stack+0x138/0x197 [ 574.465427] dump_header+0x177/0x6cd [ 574.469182] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 574.474370] ? ___ratelimit+0x55/0x537 [ 574.478273] oom_kill_process.cold+0x10/0xadd [ 574.482758] ? rcu_read_unlock_special+0x895/0xd40 [ 574.487683] ? lock_downgrade+0x740/0x740 [ 574.491968] out_of_memory+0x2ee/0x1180 [ 574.496002] ? lock_acquire+0x16f/0x430 [ 574.500008] ? oom_killer_disable+0x1d0/0x1d0 [ 574.505314] ? __alloc_pages_slowpath+0xca4/0x2930 [ 574.510249] __alloc_pages_slowpath+0x2251/0x2930 [ 574.515084] ? warn_alloc+0xf0/0xf0 [ 574.518697] ? __might_sleep+0x93/0xb0 [ 574.522689] __alloc_pages_nodemask+0x62c/0x7a0 [ 574.527344] ? __alloc_pages_slowpath+0x2930/0x2930 [ 574.532343] ? __lock_acquire+0x5f7/0x4620 [ 574.536572] ? __handle_mm_fault+0x1c49/0x3470 [ 574.541165] alloc_pages_vma+0xc9/0x4c0 [ 574.545134] __handle_mm_fault+0x18f3/0x3470 [ 574.549617] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 574.554457] ? find_held_lock+0x35/0x130 [ 574.558505] ? handle_mm_fault+0x1b6/0x7c0 [ 574.562911] handle_mm_fault+0x293/0x7c0 [ 574.566969] __get_user_pages+0x465/0x1220 [ 574.571212] ? follow_page_mask+0x1560/0x1560 [ 574.575838] get_user_pages_remote+0x1bf/0x3a0 [ 574.580452] process_vm_rw_core.isra.0+0x470/0xa60 [ 574.585385] ? __vunmap.cold+0x40/0x40 [ 574.589257] ? kasan_check_write+0x14/0x20 [ 574.593548] ? _copy_from_user+0x99/0x110 [ 574.597689] ? rw_copy_check_uvector+0x1f1/0x290 [ 574.602565] process_vm_rw+0x1cb/0x1e0 [ 574.606621] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 574.611813] ? __might_fault+0x110/0x1d0 [ 574.616134] ? find_held_lock+0x35/0x130 [ 574.620190] ? __might_fault+0x110/0x1d0 [ 574.624240] ? lock_downgrade+0x740/0x740 [ 574.628374] ? kasan_check_read+0x11/0x20 [ 574.633461] ? _copy_to_user+0x87/0xd0 [ 574.637347] ? put_timespec64+0xb4/0x100 [ 574.641413] ? nsecs_to_jiffies+0x30/0x30 [ 574.645550] SyS_process_vm_writev+0x42/0x60 [ 574.649941] ? SyS_process_vm_readv+0x60/0x60 [ 574.654423] do_syscall_64+0x1e8/0x640 [ 574.658307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.663151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 574.668324] RIP: 0033:0x459f49 [ 574.671499] RSP: 002b:00007f05683e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 574.679208] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 574.686618] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 0000000000000836 [ 574.694002] RBP: 000000000075bfc8 R08: 0000000000000299 R09: 0000000000000000 [ 574.701527] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007f05683e76d4 [ 574.709015] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 574.718034] Mem-Info: [ 574.727457] active_anon:1347922 inactive_anon:184 isolated_anon:0 [ 574.727457] active_file:22 inactive_file:39 isolated_file:8 [ 574.727457] unevictable:0 dirty:0 writeback:0 unstable:0 [ 574.727457] slab_reclaimable:16613 slab_unreclaimable:110360 [ 574.727457] mapped:52235 shmem:242 pagetables:23252 bounce:0 [ 574.727457] free:24967 free_pcp:30 free_cma:0 [ 574.761474] Node 0 active_anon:1949020kB inactive_anon:708kB active_file:4kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208964kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 574.789143] Node 1 active_anon:3442720kB inactive_anon:28kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 574.815797] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.848737] lowmem_reserve[]: 0 2580 2580 2580 [ 574.867493] Node 0 DMA32 free:36316kB min:36468kB low:45584kB high:54700kB active_anon:1946632kB inactive_anon:708kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45516kB bounce:0kB free_pcp:248kB local_pcp:4kB free_cma:0kB [ 574.904356] lowmem_reserve[]: 0 0 0 0 [ 574.908242] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.940169] lowmem_reserve[]: 0 0 0 0 [ 574.944941] Node 1 Normal free:53172kB min:53420kB low:66772kB high:80124kB active_anon:3442720kB inactive_anon:28kB active_file:76kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18272kB pagetables:47484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.979792] lowmem_reserve[]: 0 0 0 0 [ 574.984720] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10432kB [ 575.005793] Node 0 DMA32: 49*4kB (UME) 535*8kB (UME) 818*16kB (UME) 327*32kB (UME) 9*64kB (UME) 1*128kB (U) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36412kB [ 575.028720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 575.039641] Node 1 Normal: 91*4kB (UME) 133*8kB (UME) 246*16kB (UME) 576*32kB (UME) 145*64kB (UE) 25*128kB (U) 0*256kB 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (M) = 53172kB [ 575.061851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.074443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 575.084975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.098180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 575.124116] 266 total pagecache pages [ 575.128146] 0 pages in swap cache [ 575.135510] Swap cache stats: add 0, delete 0, find 0/0 [ 575.149274] Free swap = 0kB [ 575.155353] Total swap = 0kB [ 575.158392] 1965979 pages RAM [ 575.165390] 0 pages HighMem/MovableOnly [ 575.169389] 333229 pages reserved [ 575.177700] 0 pages cma reserved [ 575.187281] Out of memory: Kill process 17834 (syz-executor.0) score 1007 or sacrifice child [ 575.196130] net_ratelimit: 26 callbacks suppressed [ 575.196134] protocol 88fb is buggy, dev hsr_slave_0 [ 575.196169] protocol 88fb is buggy, dev hsr_slave_1 [ 575.196222] protocol 88fb is buggy, dev hsr_slave_0 [ 575.196250] protocol 88fb is buggy, dev hsr_slave_1 [ 575.226092] Killed process 17834 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 575.750519] protocol 88fb is buggy, dev hsr_slave_0 [ 575.755836] protocol 88fb is buggy, dev hsr_slave_1 [ 575.761475] protocol 88fb is buggy, dev hsr_slave_0 [ 575.767047] protocol 88fb is buggy, dev hsr_slave_1 [ 575.773092] protocol 88fb is buggy, dev hsr_slave_0 [ 575.778713] protocol 88fb is buggy, dev hsr_slave_1 [ 576.909260] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 576.978382] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 577.004549] CPU: 1 PID: 6929 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 577.011519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.020872] Call Trace: [ 577.023462] dump_stack+0x138/0x197 [ 577.027094] dump_header+0x177/0x6cd [ 577.030810] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 577.035932] ? ___ratelimit+0x55/0x537 [ 577.039833] oom_kill_process.cold+0x10/0xadd [ 577.045465] ? rcu_read_unlock_special+0x639/0xd40 [ 577.050406] ? lock_downgrade+0x740/0x740 [ 577.054557] out_of_memory+0x2ee/0x1180 [ 577.058549] ? lock_acquire+0x16f/0x430 [ 577.062576] ? oom_killer_disable+0x1d0/0x1d0 [ 577.067074] ? __alloc_pages_slowpath+0xca4/0x2930 [ 577.072005] __alloc_pages_slowpath+0x2251/0x2930 [ 577.077025] ? __alloc_pages_nodemask+0x639/0x7a0 [ 577.081869] ? warn_alloc+0xf0/0xf0 [ 577.085502] ? __might_sleep+0x93/0xb0 [ 577.089387] __alloc_pages_nodemask+0x62c/0x7a0 [ 577.094059] ? __alloc_pages_slowpath+0x2930/0x2930 [ 577.099079] ? lock_downgrade+0x740/0x740 [ 577.103242] ? find_get_entry+0x23c/0x520 [ 577.107413] alloc_pages_current+0xec/0x1e0 [ 577.111750] __page_cache_alloc+0x248/0x3e0 [ 577.116086] filemap_fault+0xcc9/0x19a0 [ 577.120080] ? radix_tree_next_chunk+0x43e/0x9a0 [ 577.124867] ? __lock_page_or_retry+0x8d0/0x8d0 [ 577.129645] ? lock_acquire+0x16f/0x430 [ 577.133640] ? ext4_filemap_fault+0x7b/0xb0 [ 577.137988] ext4_filemap_fault+0x83/0xb0 [ 577.142151] __do_fault+0x104/0x390 [ 577.145784] __handle_mm_fault+0x2460/0x3470 [ 577.150206] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 577.154972] ? find_held_lock+0x35/0x130 [ 577.159037] ? handle_mm_fault+0x1b6/0x7c0 [ 577.163289] handle_mm_fault+0x293/0x7c0 [ 577.167362] __do_page_fault+0x4c1/0xb80 [ 577.171438] ? vmalloc_fault+0xe30/0xe30 [ 577.175515] ? page_fault+0x2f/0x50 [ 577.179145] do_page_fault+0x71/0x511 [ 577.182954] ? page_fault+0x2f/0x50 [ 577.186577] page_fault+0x45/0x50 [ 577.190025] RIP: 0033:0x40dc52 [ 577.193206] RSP: 002b:00007ffc79d314d0 EFLAGS: 00010202 [ 577.198572] RAX: 0000000000000000 RBX: 000000000008c93d RCX: 00000000004583f0 [ 577.205848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc79d314b0 [ 577.213119] RBP: 0000000000000833 R08: 0000000000000001 R09: 0000000002155940 [ 577.220389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 577.227660] R13: 00007ffc79d31500 R14: 000000000008bd9e R15: 00007ffc79d31510 [ 577.386470] Mem-Info: [ 577.388948] active_anon:1347642 inactive_anon:182 isolated_anon:0 [ 577.388948] active_file:2 inactive_file:24 isolated_file:0 [ 577.388948] unevictable:0 dirty:0 writeback:0 unstable:0 [ 577.388948] slab_reclaimable:16629 slab_unreclaimable:110562 [ 577.388948] mapped:52226 shmem:242 pagetables:23235 bounce:0 [ 577.388948] free:25050 free_pcp:63 free_cma:0 [ 577.450129] Node 0 active_anon:1949160kB inactive_anon:708kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 577.536472] Node 1 active_anon:3441408kB inactive_anon:20kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.582995] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.614381] lowmem_reserve[]: 0 2580 2580 2580 [ 577.619119] Node 0 DMA32 free:36464kB min:36468kB low:45584kB high:54700kB active_anon:1946772kB inactive_anon:708kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45516kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 577.681948] lowmem_reserve[]: 0 0 0 0 [ 577.685813] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.794083] lowmem_reserve[]: 0 0 0 0 [ 577.798066] Node 1 Normal free:53304kB min:53420kB low:66772kB high:80124kB active_anon:3441432kB inactive_anon:20kB active_file:68kB inactive_file:52kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18336kB pagetables:47412kB bounce:0kB free_pcp:248kB local_pcp:8kB free_cma:0kB [ 577.937385] lowmem_reserve[]: 0 0 0 0 [ 577.954302] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10432kB [ 577.972395] Node 0 DMA32: 32*4kB (UE) 541*8kB (UME) 817*16kB (UME) 327*32kB (UME) 9*64kB (UME) 1*128kB (U) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36376kB [ 577.988386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.030083] Node 1 Normal: 45*4kB (ME) 150*8kB (UME) 225*16kB (UME) 578*32kB (UME) 146*64kB (UME) 27*128kB (UM) 1*256kB (M) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (M) = 53428kB [ 578.098303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.167770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.212075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.256220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.314435] 273 total pagecache pages [ 578.318293] 0 pages in swap cache [ 578.327796] Swap cache stats: add 0, delete 0, find 0/0 [ 578.366217] Free swap = 0kB [ 578.369296] Total swap = 0kB [ 578.386269] 1965979 pages RAM [ 578.389403] 0 pages HighMem/MovableOnly [ 578.427618] 333229 pages reserved [ 578.468216] 0 pages cma reserved [ 578.477836] Out of memory: Kill process 17877 (syz-executor.0) score 1007 or sacrifice child [ 578.524474] Killed process 17877 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 578.627435] oom_reaper: reaped process 17877 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 578.806798] FAULT_INJECTION: forcing a failure. [ 578.806798] name failslab, interval 1, probability 0, space 0, times 0 [ 578.818384] CPU: 0 PID: 22615 Comm: syz-executor.1 Not tainted 4.14.151 #0 [ 578.825722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.835095] Call Trace: [ 578.837682] dump_stack+0x138/0x197 [ 578.841321] should_fail.cold+0x10f/0x159 [ 578.845474] should_failslab+0xdb/0x130 [ 578.849439] kmem_cache_alloc_node_trace+0x280/0x770 [ 578.854534] ? trace_hardirqs_on+0x10/0x10 [ 578.858877] __kmalloc_node+0x3d/0x80 [ 578.862677] kvmalloc_node+0x4e/0xe0 [ 578.866397] seq_read+0x916/0x1280 [ 578.869944] ? __inode_security_revalidate+0xd6/0x130 [ 578.875147] ? seq_lseek+0x3c0/0x3c0 [ 578.878851] ? avc_policy_seqno+0x9/0x20 [ 578.882917] ? selinux_file_permission+0x85/0x480 [ 578.887780] proc_reg_read+0xfa/0x170 [ 578.891935] ? seq_lseek+0x3c0/0x3c0 [ 578.895775] do_iter_read+0x3e2/0x5b0 [ 578.899578] vfs_readv+0xd3/0x130 [ 578.903022] ? compat_rw_copy_check_uvector+0x310/0x310 [ 578.908378] ? __fget+0x237/0x370 [ 578.911820] ? __fget_light+0x172/0x1f0 [ 578.915785] do_preadv+0x15d/0x200 [ 578.919313] ? do_readv+0x2d0/0x2d0 [ 578.922933] ? SyS_writev+0x30/0x30 [ 578.926552] SyS_preadv+0x31/0x40 [ 578.930007] do_syscall_64+0x1e8/0x640 [ 578.933894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.938738] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 578.943928] RIP: 0033:0x459f49 [ 578.947117] RSP: 002b:00007f8adfe11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 578.954817] RAX: ffffffffffffffda RBX: 00007f8adfe11c90 RCX: 0000000000459f49 [ 578.962080] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 578.969339] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 578.976605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8adfe126d4 [ 578.983862] R13: 00000000004c76a3 R14: 00000000004dd2a0 R15: 0000000000000005 [ 579.012754] devpts: called with bogus options 04:32:53 executing program 1 (fault-call:2 fault-nth:0): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) 04:32:53 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) getpgid(r8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:53 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:54 executing program 1 (fault-call:2 fault-nth:1): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) 04:32:54 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:54 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 579.099067] devpts: called with bogus options [ 579.112484] devpts: called with bogus options [ 579.134691] devpts: called with bogus options [ 579.218652] devpts: called with bogus options 04:32:54 executing program 4 (fault-call:2 fault-nth:0): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 579.367303] FAULT_INJECTION: forcing a failure. [ 579.367303] name failslab, interval 1, probability 0, space 0, times 0 [ 579.417695] CPU: 1 PID: 22644 Comm: syz-executor.4 Not tainted 4.14.151 #0 [ 579.424773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.434142] Call Trace: [ 579.436761] dump_stack+0x138/0x197 [ 579.440420] should_fail.cold+0x10f/0x159 [ 579.444605] should_failslab+0xdb/0x130 [ 579.448614] kmem_cache_alloc_node_trace+0x280/0x770 [ 579.453741] ? trace_hardirqs_on+0x10/0x10 [ 579.458003] __kmalloc_node+0x3d/0x80 [ 579.461825] kvmalloc_node+0x4e/0xe0 [ 579.465562] seq_read+0x916/0x1280 [ 579.469133] ? __inode_security_revalidate+0xd6/0x130 [ 579.474344] ? seq_lseek+0x3c0/0x3c0 [ 579.478084] ? avc_policy_seqno+0x9/0x20 [ 579.482164] ? selinux_file_permission+0x85/0x480 [ 579.487036] proc_reg_read+0xfa/0x170 [ 579.490861] ? seq_lseek+0x3c0/0x3c0 [ 579.498689] do_iter_read+0x3e2/0x5b0 [ 579.502537] vfs_readv+0xd3/0x130 [ 579.506015] ? compat_rw_copy_check_uvector+0x310/0x310 [ 579.511416] ? __fget+0x237/0x370 [ 579.514896] ? __fget_light+0x172/0x1f0 [ 579.518907] do_preadv+0x15d/0x200 [ 579.522468] ? do_readv+0x2d0/0x2d0 [ 579.526401] ? SyS_writev+0x30/0x30 [ 579.530077] SyS_preadv+0x31/0x40 [ 579.533550] do_syscall_64+0x1e8/0x640 [ 579.537470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.542346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 579.547581] RIP: 0033:0x459f49 [ 579.551326] RSP: 002b:00007fc042f71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 579.559397] RAX: ffffffffffffffda RBX: 00007fc042f71c90 RCX: 0000000000459f49 [ 579.566770] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000004 [ 579.574048] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 579.581310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc042f726d4 [ 579.588661] R13: 00000000004c76a3 R14: 00000000004dd2a0 R15: 0000000000000005 04:32:54 executing program 4 (fault-call:2 fault-nth:1): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:32:54 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 579.922372] devpts: called with bogus options 04:32:54 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 580.076483] devpts: called with bogus options 04:32:55 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x7d, 0x7, 0x1, 0x40, 0xf1, 0x7f, 0x0, 0x20, 0x5, 0x2}, 0xb) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={r3, @in={{0x2, 0x4e20, @local}}, 0x8, 0x1, 0x5, 0x51, 0x3}, &(0x7f0000000100)=0x98) 04:32:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 580.298359] devpts: called with bogus options 04:32:55 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 580.351264] sctp: [Deprecated]: syz-executor.4 (pid 22671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.351264] Use struct sctp_sack_info instead [ 580.396825] devpts: called with bogus options [ 580.489895] devpts: called with bogus options [ 581.228922] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 581.260071] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 581.264910] CPU: 1 PID: 6917 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 581.271487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.280839] Call Trace: [ 581.283432] dump_stack+0x138/0x197 [ 581.287066] dump_header+0x177/0x6cd [ 581.290785] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 581.295977] ? ___ratelimit+0x55/0x537 [ 581.299867] oom_kill_process.cold+0x10/0xadd [ 581.304364] ? oom_unkillable_task+0x294/0x390 [ 581.309050] ? lock_downgrade+0x740/0x740 [ 581.313220] out_of_memory+0x2ee/0x1180 [ 581.317290] ? lock_acquire+0x16f/0x430 [ 581.321272] ? oom_killer_disable+0x1d0/0x1d0 [ 581.325766] ? __alloc_pages_slowpath+0xca4/0x2930 [ 581.330722] __alloc_pages_slowpath+0x2251/0x2930 [ 581.335582] ? __alloc_pages_nodemask+0x639/0x7a0 [ 581.340472] ? warn_alloc+0xf0/0xf0 [ 581.344119] ? __might_sleep+0x93/0xb0 [ 581.348112] __alloc_pages_nodemask+0x62c/0x7a0 [ 581.352873] ? __alloc_pages_slowpath+0x2930/0x2930 [ 581.357904] ? lock_downgrade+0x740/0x740 [ 581.362060] ? find_get_entry+0x23c/0x520 [ 581.366211] alloc_pages_current+0xec/0x1e0 [ 581.370797] __page_cache_alloc+0x248/0x3e0 [ 581.375144] filemap_fault+0xcc9/0x19a0 [ 581.379128] ? radix_tree_next_chunk+0x43e/0x9a0 [ 581.383901] ? __lock_page_or_retry+0x8d0/0x8d0 [ 581.388578] ? lock_acquire+0x16f/0x430 [ 581.392584] ? ext4_filemap_fault+0x7b/0xb0 [ 581.396924] ext4_filemap_fault+0x83/0xb0 [ 581.401077] __do_fault+0x104/0x390 [ 581.404813] __handle_mm_fault+0x2460/0x3470 [ 581.409486] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 581.414262] ? find_held_lock+0x35/0x130 [ 581.418329] ? handle_mm_fault+0x1b6/0x7c0 [ 581.422580] handle_mm_fault+0x293/0x7c0 [ 581.426644] __do_page_fault+0x4c1/0xb80 [ 581.430710] ? vmalloc_fault+0xe30/0xe30 [ 581.434771] ? page_fault+0x2f/0x50 [ 581.438401] do_page_fault+0x71/0x511 [ 581.442216] ? page_fault+0x2f/0x50 [ 581.445881] page_fault+0x45/0x50 [ 581.449344] RIP: 0033:0x40f170 [ 581.452533] RSP: 002b:000000c420039ef8 EFLAGS: 00010216 [ 581.457892] RAX: ffffffffffffff92 RBX: 000000001dcc1c8f RCX: 000000000045b153 [ 581.465205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000018889e0 [ 581.472499] RBP: 000000c420039ef0 R08: 0000000000000000 R09: 0000000000000000 [ 581.479781] R10: 000000c420039ed8 R11: 0000000000000202 R12: 000000874aba826d [ 581.487069] R13: 0000000000000001 R14: 0000000000000013 R15: 0000000000000100 [ 581.494678] net_ratelimit: 26 callbacks suppressed [ 581.494685] protocol 88fb is buggy, dev hsr_slave_0 [ 581.505368] protocol 88fb is buggy, dev hsr_slave_1 [ 581.510545] protocol 88fb is buggy, dev hsr_slave_0 [ 581.515967] protocol 88fb is buggy, dev hsr_slave_1 [ 581.572315] Mem-Info: [ 581.576102] active_anon:1347567 inactive_anon:184 isolated_anon:0 [ 581.576102] active_file:41 inactive_file:0 isolated_file:0 [ 581.576102] unevictable:0 dirty:0 writeback:0 unstable:0 [ 581.576102] slab_reclaimable:16685 slab_unreclaimable:110424 [ 581.576102] mapped:52228 shmem:242 pagetables:23384 bounce:0 [ 581.576102] free:25022 free_pcp:0 free_cma:0 [ 581.762366] Node 0 active_anon:1948872kB inactive_anon:708kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 581.800682] Node 1 active_anon:3441396kB inactive_anon:28kB active_file:112kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.936202] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.990134] protocol 88fb is buggy, dev hsr_slave_0 [ 581.995270] protocol 88fb is buggy, dev hsr_slave_1 [ 582.000471] protocol 88fb is buggy, dev hsr_slave_0 [ 582.005537] protocol 88fb is buggy, dev hsr_slave_1 [ 582.010687] protocol 88fb is buggy, dev hsr_slave_0 [ 582.015754] protocol 88fb is buggy, dev hsr_slave_1 [ 582.074261] lowmem_reserve[]: 0 2580 2580 2580 [ 582.080205] Node 0 DMA32 free:36364kB min:36468kB low:45584kB high:54700kB active_anon:1946484kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45512kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 582.119991] lowmem_reserve[]: 0 0 0 0 [ 582.123895] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 582.150203] lowmem_reserve[]: 0 0 0 0 [ 582.154031] Node 1 Normal free:53232kB min:53420kB low:66772kB high:80124kB active_anon:3441496kB inactive_anon:28kB active_file:128kB inactive_file:56kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18464kB pagetables:48012kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 582.183207] lowmem_reserve[]: 0 0 0 0 [ 582.187037] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10432kB [ 582.202513] Node 0 DMA32: 9*4kB (UME) 588*8kB (UME) 804*16kB (UME) 328*32kB (UME) 9*64kB (UME) 1*128kB (U) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 36484kB [ 582.218814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 582.229647] Node 1 Normal: 132*4kB (UME) 110*8kB (UME) 180*16kB (UME) 565*32kB (UME) 148*64kB (UME) 29*128kB (UM) 4*256kB (M) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (M) = 53472kB [ 582.246638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.255539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.264265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.273171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.281795] 287 total pagecache pages [ 582.285629] 0 pages in swap cache [ 582.289081] Swap cache stats: add 0, delete 0, find 0/0 [ 582.294483] Free swap = 0kB [ 582.297499] Total swap = 0kB [ 582.300728] 1965979 pages RAM [ 582.303830] 0 pages HighMem/MovableOnly [ 582.307804] 333229 pages reserved [ 582.311374] 0 pages cma reserved [ 582.314754] Out of memory: Kill process 18116 (syz-executor.0) score 1007 or sacrifice child [ 582.392958] Killed process 18116 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 582.577411] oom_reaper: reaped process 18116 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 583.007579] sctp: [Deprecated]: syz-executor.4 (pid 22674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.007579] Use struct sctp_sack_info instead 04:32:58 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:58 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x48040, 0x0) write$P9_RSTAT(r0, &(0x7f0000000380)={0x22f, 0x7d, 0x1, {0x0, 0x228, 0x3, 0x3f3, {0x14c, 0x1, 0x8}, 0x0, 0x9, 0x2, 0xffffffffffffffe1, 0xa7, 'net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', 0xa7, 'net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', 0xa7, 'net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'}}, 0x22f) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:32:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 583.800718] devpts: called with bogus options [ 583.809129] devpts: called with bogus options 04:32:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:32:59 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a6000000000000000000100000", @ANYRES32=r2], 0x2}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@mcast2, 0x1, r2}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 584.059978] devpts: called with bogus options [ 587.750139] net_ratelimit: 26 callbacks suppressed [ 587.750145] protocol 88fb is buggy, dev hsr_slave_0 [ 587.760252] protocol 88fb is buggy, dev hsr_slave_1 [ 587.765477] protocol 88fb is buggy, dev hsr_slave_0 [ 587.770765] protocol 88fb is buggy, dev hsr_slave_1 [ 588.240180] protocol 88fb is buggy, dev hsr_slave_0 [ 588.245710] protocol 88fb is buggy, dev hsr_slave_1 [ 588.250896] protocol 88fb is buggy, dev hsr_slave_0 [ 588.255967] protocol 88fb is buggy, dev hsr_slave_1 [ 588.261316] protocol 88fb is buggy, dev hsr_slave_0 [ 588.266544] protocol 88fb is buggy, dev hsr_slave_1 [ 593.990143] net_ratelimit: 26 callbacks suppressed [ 593.990149] protocol 88fb is buggy, dev hsr_slave_0 [ 594.000249] protocol 88fb is buggy, dev hsr_slave_1 [ 594.005661] protocol 88fb is buggy, dev hsr_slave_0 [ 594.010746] protocol 88fb is buggy, dev hsr_slave_1 [ 594.470205] protocol 88fb is buggy, dev hsr_slave_0 [ 594.475471] protocol 88fb is buggy, dev hsr_slave_1 [ 594.481416] protocol 88fb is buggy, dev hsr_slave_0 [ 594.486504] protocol 88fb is buggy, dev hsr_slave_1 [ 594.491856] protocol 88fb is buggy, dev hsr_slave_0 [ 594.496920] protocol 88fb is buggy, dev hsr_slave_1 [ 600.230103] net_ratelimit: 26 callbacks suppressed [ 600.230107] protocol 88fb is buggy, dev hsr_slave_0 [ 600.241328] protocol 88fb is buggy, dev hsr_slave_1 [ 600.246850] protocol 88fb is buggy, dev hsr_slave_0 [ 600.252099] protocol 88fb is buggy, dev hsr_slave_1 [ 600.710156] protocol 88fb is buggy, dev hsr_slave_0 [ 600.715515] protocol 88fb is buggy, dev hsr_slave_1 [ 600.722433] protocol 88fb is buggy, dev hsr_slave_0 [ 600.727529] protocol 88fb is buggy, dev hsr_slave_1 [ 600.732815] protocol 88fb is buggy, dev hsr_slave_0 [ 600.738007] protocol 88fb is buggy, dev hsr_slave_1 [ 606.470131] net_ratelimit: 26 callbacks suppressed [ 606.470137] protocol 88fb is buggy, dev hsr_slave_0 [ 606.480667] protocol 88fb is buggy, dev hsr_slave_1 [ 606.485779] protocol 88fb is buggy, dev hsr_slave_0 [ 606.491043] protocol 88fb is buggy, dev hsr_slave_1 [ 606.950141] protocol 88fb is buggy, dev hsr_slave_0 [ 606.955265] protocol 88fb is buggy, dev hsr_slave_1 [ 606.960820] protocol 88fb is buggy, dev hsr_slave_0 [ 606.965995] protocol 88fb is buggy, dev hsr_slave_1 [ 606.971288] protocol 88fb is buggy, dev hsr_slave_0 [ 606.976471] protocol 88fb is buggy, dev hsr_slave_1 04:33:24 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x404, 0x0, 0x6}, {0x8fa, 0x0, 0x6}, {0x880, 0x0, 0x7fff}]}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:33:24 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 612.710146] net_ratelimit: 26 callbacks suppressed [ 612.710151] protocol 88fb is buggy, dev hsr_slave_0 [ 612.720201] protocol 88fb is buggy, dev hsr_slave_1 [ 612.725296] protocol 88fb is buggy, dev hsr_slave_0 [ 612.730716] protocol 88fb is buggy, dev hsr_slave_1 [ 613.190141] protocol 88fb is buggy, dev hsr_slave_0 [ 613.195560] protocol 88fb is buggy, dev hsr_slave_1 [ 613.200820] protocol 88fb is buggy, dev hsr_slave_0 [ 613.205896] protocol 88fb is buggy, dev hsr_slave_1 [ 613.211196] protocol 88fb is buggy, dev hsr_slave_0 [ 613.216416] protocol 88fb is buggy, dev hsr_slave_1 04:33:29 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x280800) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:33:29 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 617.153221] devpts: called with bogus options [ 618.950152] net_ratelimit: 26 callbacks suppressed [ 618.950158] protocol 88fb is buggy, dev hsr_slave_0 [ 618.960394] protocol 88fb is buggy, dev hsr_slave_1 [ 618.965947] protocol 88fb is buggy, dev hsr_slave_0 [ 618.971056] protocol 88fb is buggy, dev hsr_slave_1 [ 619.430152] protocol 88fb is buggy, dev hsr_slave_0 [ 619.435433] protocol 88fb is buggy, dev hsr_slave_1 [ 619.440875] protocol 88fb is buggy, dev hsr_slave_0 [ 619.446043] protocol 88fb is buggy, dev hsr_slave_1 [ 619.451193] protocol 88fb is buggy, dev hsr_slave_0 [ 619.456350] protocol 88fb is buggy, dev hsr_slave_1 04:33:36 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xada}], 0x2, 0x0) [ 625.190103] net_ratelimit: 26 callbacks suppressed [ 625.190108] protocol 88fb is buggy, dev hsr_slave_0 [ 625.200396] protocol 88fb is buggy, dev hsr_slave_1 [ 625.205478] protocol 88fb is buggy, dev hsr_slave_0 [ 625.210558] protocol 88fb is buggy, dev hsr_slave_1 04:33:39 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 625.670308] protocol 88fb is buggy, dev hsr_slave_0 [ 625.675697] protocol 88fb is buggy, dev hsr_slave_1 [ 625.681025] protocol 88fb is buggy, dev hsr_slave_0 [ 625.686294] protocol 88fb is buggy, dev hsr_slave_1 [ 625.691812] protocol 88fb is buggy, dev hsr_slave_0 [ 625.697104] protocol 88fb is buggy, dev hsr_slave_1 [ 627.376707] devpts: called with bogus options [ 628.595657] sshd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 628.611913] sshd cpuset=/ mems_allowed=0-1 [ 628.616314] CPU: 0 PID: 6901 Comm: sshd Not tainted 4.14.151 #0 [ 628.622407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.631761] Call Trace: [ 628.634363] dump_stack+0x138/0x197 [ 628.637987] dump_header+0x177/0x6cd [ 628.641811] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 628.647136] ? ___ratelimit+0x55/0x537 [ 628.651038] oom_kill_process.cold+0x10/0xadd [ 628.655529] ? oom_unkillable_task+0x294/0x390 [ 628.660114] ? lock_downgrade+0x740/0x740 [ 628.664247] out_of_memory+0x2ee/0x1180 [ 628.668205] ? lock_acquire+0x16f/0x430 [ 628.672536] ? oom_killer_disable+0x1d0/0x1d0 [ 628.677159] ? __alloc_pages_slowpath+0xca4/0x2930 [ 628.682216] __alloc_pages_slowpath+0x2251/0x2930 [ 628.687067] ? __alloc_pages_nodemask+0x639/0x7a0 [ 628.691997] ? warn_alloc+0xf0/0xf0 [ 628.695613] ? __might_sleep+0x93/0xb0 [ 628.699496] __alloc_pages_nodemask+0x62c/0x7a0 [ 628.704221] ? __alloc_pages_slowpath+0x2930/0x2930 [ 628.709335] ? lock_downgrade+0x740/0x740 [ 628.713535] ? find_get_entry+0x23c/0x520 [ 628.717928] alloc_pages_current+0xec/0x1e0 [ 628.722246] __page_cache_alloc+0x248/0x3e0 [ 628.726558] filemap_fault+0xcc9/0x19a0 [ 628.730523] ? radix_tree_next_chunk+0x43e/0x9a0 [ 628.735307] ? __lock_page_or_retry+0x8d0/0x8d0 [ 628.739964] ? lock_acquire+0x16f/0x430 [ 628.743940] ? ext4_filemap_fault+0x7b/0xb0 [ 628.748247] ext4_filemap_fault+0x83/0xb0 [ 628.752470] __do_fault+0x104/0x390 [ 628.756093] __handle_mm_fault+0x2460/0x3470 [ 628.760498] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 628.765235] ? find_held_lock+0x35/0x130 [ 628.769277] ? handle_mm_fault+0x1b6/0x7c0 [ 628.773496] handle_mm_fault+0x293/0x7c0 [ 628.777546] __do_page_fault+0x4c1/0xb80 [ 628.781627] ? vmalloc_fault+0xe30/0xe30 [ 628.785671] ? page_fault+0x2f/0x50 [ 628.789282] do_page_fault+0x71/0x511 [ 628.793328] ? page_fault+0x2f/0x50 [ 628.796938] page_fault+0x45/0x50 [ 628.800373] RIP: 0033:0x7fe4a715f620 [ 628.804212] RSP: 002b:00007fff8a2b1868 EFLAGS: 00010293 [ 628.809570] RAX: 0000558a1fbf0480 RBX: 00000000000002a0 RCX: 00000000372a6e01 [ 628.816828] RDX: 0000000000000008 RSI: 0000558a1f307d40 RDI: 0000558a1fbf0480 [ 628.824110] RBP: 0000558a1fbf01e0 R08: 0000000000000000 R09: 000000000000003e [ 628.831629] R10: 000000003be49252 R11: 00007fe4a7193a50 R12: 0000000000000010 [ 628.838898] R13: 000000000000005e R14: 0000558a1fbd1560 R15: 0000558a1f307d40 [ 628.853795] Mem-Info: [ 628.856264] active_anon:1349060 inactive_anon:184 isolated_anon:0 [ 628.856264] active_file:29 inactive_file:25 isolated_file:0 [ 628.856264] unevictable:0 dirty:0 writeback:3 unstable:0 [ 628.856264] slab_reclaimable:16654 slab_unreclaimable:108785 [ 628.856264] mapped:52283 shmem:242 pagetables:23413 bounce:0 [ 628.856264] free:24925 free_pcp:173 free_cma:0 [ 628.962736] Node 0 active_anon:1951952kB inactive_anon:708kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208968kB dirty:0kB writeback:4kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 629.134767] Node 1 active_anon:3445292kB inactive_anon:28kB active_file:76kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 629.163797] Node 0 DMA free:10456kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.196912] lowmem_reserve[]: 0 2580 2580 2580 [ 629.201627] Node 0 DMA32 free:36456kB min:36468kB low:45584kB high:54700kB active_anon:1949568kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.237993] lowmem_reserve[]: 0 0 0 0 [ 629.242077] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.272637] lowmem_reserve[]: 0 0 0 0 [ 629.276519] Node 1 Normal free:53116kB min:53420kB low:66772kB high:80124kB active_anon:3445364kB inactive_anon:28kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18336kB pagetables:48128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.308029] lowmem_reserve[]: 0 0 0 0 [ 629.322317] Node 0 DMA: 2*4kB (UM) 6*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10456kB [ 629.339996] Node 0 DMA32: 48*4kB (UME) 773*8kB (UME) 740*16kB (UME) 320*32kB (UM) 7*64kB (UME) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36456kB [ 629.372678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 629.387440] Node 1 Normal: 149*4kB (UME) 155*8kB (UME) 231*16kB (UME) 623*32kB (UME) 154*64kB (UME) 29*128kB (UM) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53116kB [ 629.412047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.425247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.436032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.448733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.467643] 268 total pagecache pages [ 629.471552] 0 pages in swap cache [ 629.475018] Swap cache stats: add 0, delete 0, find 0/0 [ 629.484400] Free swap = 0kB [ 629.487493] Total swap = 0kB [ 629.490581] 1965979 pages RAM [ 629.493691] 0 pages HighMem/MovableOnly [ 629.497658] 333229 pages reserved [ 629.503116] 0 pages cma reserved [ 629.506497] Out of memory: Kill process 18254 (syz-executor.0) score 1007 or sacrifice child [ 629.515337] Killed process 18254 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:33:41 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1, 0x8000000) [ 629.629238] oom_reaper: reaped process 18254 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 629.821350] devpts: called with bogus options 04:33:44 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 631.430145] net_ratelimit: 26 callbacks suppressed [ 631.430152] protocol 88fb is buggy, dev hsr_slave_0 [ 631.440233] protocol 88fb is buggy, dev hsr_slave_1 [ 631.445330] protocol 88fb is buggy, dev hsr_slave_0 [ 631.450501] protocol 88fb is buggy, dev hsr_slave_1 [ 631.910160] protocol 88fb is buggy, dev hsr_slave_0 [ 631.915697] protocol 88fb is buggy, dev hsr_slave_1 [ 631.921323] protocol 88fb is buggy, dev hsr_slave_0 [ 631.926458] protocol 88fb is buggy, dev hsr_slave_1 [ 631.931610] protocol 88fb is buggy, dev hsr_slave_0 [ 631.937186] protocol 88fb is buggy, dev hsr_slave_1 04:33:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000300)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x20, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x8000, 0x5}, @window={0x3, 0x6, 0x60}, @sack_perm], 0x3) dup3(r1, r0, 0x140000) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000300)) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000380)={0x6e, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x6, [{{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @local}}]}, 0x390) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 632.619807] devpts: called with bogus options [ 632.646097] devpts: called with bogus options 04:33:47 executing program 4: sysinfo(&(0x7f0000000140)=""/23) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80, 0x40000) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000040)=""/247, &(0x7f0000000140)=0xf7) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000040)=""/193, 0xc1}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000380)=""/179, 0xb3}], 0x4, 0x0) [ 633.639058] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 633.658965] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 633.664850] CPU: 0 PID: 22752 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 633.671888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.681265] Call Trace: [ 633.683847] dump_stack+0x138/0x197 [ 633.687460] dump_header+0x177/0x6cd [ 633.691155] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 633.696239] ? ___ratelimit+0x55/0x537 [ 633.700104] oom_kill_process.cold+0x10/0xadd [ 633.704602] ? rcu_read_unlock_special+0x639/0xd40 [ 633.709515] ? lock_downgrade+0x740/0x740 [ 633.713643] out_of_memory+0x2ee/0x1180 [ 633.717596] ? lock_acquire+0x16f/0x430 [ 633.721940] ? oom_killer_disable+0x1d0/0x1d0 [ 633.726635] ? __alloc_pages_slowpath+0xca4/0x2930 [ 633.731661] __alloc_pages_slowpath+0x2251/0x2930 [ 633.736511] ? warn_alloc+0xf0/0xf0 [ 633.740200] ? __might_sleep+0x93/0xb0 [ 633.744090] __alloc_pages_nodemask+0x62c/0x7a0 [ 633.748748] ? __alloc_pages_slowpath+0x2930/0x2930 [ 633.753746] ? __lock_acquire+0x5f7/0x4620 [ 633.757966] ? __handle_mm_fault+0x1c49/0x3470 [ 633.762571] ? get_task_policy.part.0+0x85/0xa0 [ 633.767328] alloc_pages_vma+0xc9/0x4c0 [ 633.771291] __handle_mm_fault+0x18f3/0x3470 [ 633.775798] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 633.780533] ? find_held_lock+0x35/0x130 [ 633.784572] ? handle_mm_fault+0x1b6/0x7c0 [ 633.788875] handle_mm_fault+0x293/0x7c0 [ 633.793353] __get_user_pages+0x465/0x1220 [ 633.797569] ? follow_page_mask+0x1560/0x1560 [ 633.802046] get_user_pages_remote+0x1bf/0x3a0 [ 633.806706] process_vm_rw_core.isra.0+0x470/0xa60 [ 633.811631] ? __vunmap.cold+0x40/0x40 [ 633.815502] ? kasan_check_write+0x14/0x20 [ 633.819977] ? _copy_from_user+0x99/0x110 [ 633.824113] ? rw_copy_check_uvector+0x1f1/0x290 [ 633.828853] process_vm_rw+0x1cb/0x1e0 [ 633.832721] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 633.837887] ? __might_fault+0x110/0x1d0 [ 633.841926] ? find_held_lock+0x35/0x130 [ 633.845965] ? __might_fault+0x110/0x1d0 [ 633.850023] ? lock_downgrade+0x740/0x740 [ 633.854157] ? kasan_check_read+0x11/0x20 [ 633.858294] ? _copy_to_user+0x87/0xd0 [ 633.862159] ? put_timespec64+0xb4/0x100 [ 633.866208] ? nsecs_to_jiffies+0x30/0x30 [ 633.870338] SyS_process_vm_writev+0x42/0x60 [ 633.874723] ? SyS_process_vm_readv+0x60/0x60 [ 633.879207] do_syscall_64+0x1e8/0x640 [ 633.883080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.887904] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 633.893081] RIP: 0033:0x459f49 [ 633.896258] RSP: 002b:00007f0568407c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 633.904220] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 633.911923] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 0000000000000859 [ 633.919180] RBP: 000000000075bf20 R08: 0000000000000299 R09: 0000000000000000 [ 633.926447] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007f05684086d4 [ 633.933717] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 633.982231] Mem-Info: [ 633.985765] active_anon:1348922 inactive_anon:182 isolated_anon:0 [ 633.985765] active_file:21 inactive_file:55 isolated_file:0 [ 633.985765] unevictable:0 dirty:0 writeback:0 unstable:0 [ 633.985765] slab_reclaimable:16626 slab_unreclaimable:109056 [ 633.985765] mapped:52230 shmem:242 pagetables:23445 bounce:0 [ 633.985765] free:25024 free_pcp:0 free_cma:0 [ 634.031890] Node 0 active_anon:1951652kB inactive_anon:708kB active_file:64kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208972kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 634.067742] Node 1 active_anon:3444040kB inactive_anon:20kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 634.099808] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.129025] lowmem_reserve[]: 0 2580 2580 2580 [ 634.141962] Node 0 DMA32 free:36396kB min:36468kB low:45584kB high:54700kB active_anon:1949300kB inactive_anon:708kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45516kB bounce:0kB free_pcp:376kB local_pcp:204kB free_cma:0kB [ 634.180883] lowmem_reserve[]: 0 0 0 0 [ 634.184747] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.218798] lowmem_reserve[]: 0 0 0 0 [ 634.222712] Node 1 Normal free:53272kB min:53420kB low:66772kB high:80124kB active_anon:3444040kB inactive_anon:20kB active_file:96kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18368kB pagetables:48252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.259628] lowmem_reserve[]: 0 0 0 0 [ 634.267488] Node 0 DMA: 2*4kB (UM) 9*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10480kB [ 634.291664] Node 0 DMA32: 35*4kB (UME) 760*8kB (UE) 740*16kB (UME) 323*32kB (UM) 7*64kB (UME) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36396kB [ 634.315187] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.327439] Node 1 Normal: 182*4kB (UME) 80*8kB (UME) 176*16kB (UME) 654*32kB (UME) 154*64kB (UE) 29*128kB (UM) 1*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53272kB [ 634.352822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.363082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.373991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.394002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.405892] 274 total pagecache pages [ 634.409725] 0 pages in swap cache [ 634.422875] Swap cache stats: add 0, delete 0, find 0/0 [ 634.429032] Free swap = 0kB [ 634.437745] Total swap = 0kB [ 634.444426] 1965979 pages RAM [ 634.447686] 0 pages HighMem/MovableOnly [ 634.458013] 333229 pages reserved [ 634.465177] 0 pages cma reserved [ 634.468583] Out of memory: Kill process 18819 (syz-executor.0) score 1007 or sacrifice child [ 634.481828] Killed process 18819 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 634.673310] oom_reaper: reaped process 18819 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:33:49 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:49 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 634.921777] devpts: called with bogus options [ 634.952159] devpts: called with bogus options [ 635.868671] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 635.882527] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 635.887977] CPU: 1 PID: 22773 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 635.895369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.904936] Call Trace: [ 635.907824] dump_stack+0x138/0x197 [ 635.911722] dump_header+0x177/0x6cd [ 635.915445] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 635.921172] ? ___ratelimit+0x55/0x537 [ 635.925085] oom_kill_process.cold+0x10/0xadd [ 635.930024] ? rcu_read_unlock_special+0x895/0xd40 [ 635.934966] ? lock_downgrade+0x740/0x740 [ 635.939127] out_of_memory+0x2ee/0x1180 [ 635.943148] ? lock_acquire+0x16f/0x430 [ 635.947209] ? oom_killer_disable+0x1d0/0x1d0 [ 635.951728] ? __alloc_pages_slowpath+0xca4/0x2930 [ 635.956982] __alloc_pages_slowpath+0x2251/0x2930 [ 635.962045] ? warn_alloc+0xf0/0xf0 [ 635.965698] ? __might_sleep+0x93/0xb0 [ 635.969587] __alloc_pages_nodemask+0x62c/0x7a0 [ 635.974286] ? __alloc_pages_slowpath+0x2930/0x2930 [ 635.979331] ? __lock_acquire+0x5f7/0x4620 [ 635.984117] ? __handle_mm_fault+0x1c49/0x3470 [ 635.989226] alloc_pages_vma+0xc9/0x4c0 [ 635.993197] __handle_mm_fault+0x18f3/0x3470 [ 635.998925] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 636.003790] ? find_held_lock+0x35/0x130 [ 636.008551] ? handle_mm_fault+0x1b6/0x7c0 [ 636.012816] handle_mm_fault+0x293/0x7c0 [ 636.017046] __get_user_pages+0x465/0x1220 [ 636.021471] ? follow_page_mask+0x1560/0x1560 [ 636.025979] get_user_pages_remote+0x1bf/0x3a0 [ 636.030805] process_vm_rw_core.isra.0+0x470/0xa60 [ 636.035743] ? __vunmap.cold+0x40/0x40 [ 636.039628] ? kasan_check_write+0x14/0x20 [ 636.043848] ? _copy_from_user+0x99/0x110 [ 636.048152] ? rw_copy_check_uvector+0x1f1/0x290 [ 636.053336] process_vm_rw+0x1cb/0x1e0 [ 636.057393] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 636.062688] ? __might_fault+0x110/0x1d0 [ 636.066746] ? find_held_lock+0x35/0x130 [ 636.070803] ? __might_fault+0x110/0x1d0 [ 636.074896] ? lock_downgrade+0x740/0x740 [ 636.079573] ? kasan_check_read+0x11/0x20 [ 636.083996] ? _copy_to_user+0x87/0xd0 [ 636.088341] ? put_timespec64+0xb4/0x100 [ 636.092412] ? nsecs_to_jiffies+0x30/0x30 [ 636.096614] SyS_process_vm_writev+0x42/0x60 [ 636.101023] ? SyS_process_vm_readv+0x60/0x60 [ 636.105510] do_syscall_64+0x1e8/0x640 [ 636.109772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 636.114849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 636.120030] RIP: 0033:0x459f49 [ 636.123206] RSP: 002b:00007fc161848c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 636.130902] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 636.138162] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 000000000000088c [ 636.145426] RBP: 000000000075bfc8 R08: 0000000000000299 R09: 0000000000000000 [ 636.152692] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007fc1618496d4 [ 636.159956] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 636.169297] Mem-Info: [ 636.171820] active_anon:1349126 inactive_anon:184 isolated_anon:0 [ 636.171820] active_file:10 inactive_file:40 isolated_file:0 [ 636.171820] unevictable:0 dirty:0 writeback:0 unstable:0 [ 636.171820] slab_reclaimable:16648 slab_unreclaimable:108831 [ 636.171820] mapped:52226 shmem:242 pagetables:23430 bounce:0 [ 636.171820] free:25035 free_pcp:30 free_cma:0 [ 636.205395] Node 0 active_anon:1951948kB inactive_anon:712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 636.232997] Node 1 active_anon:3444556kB inactive_anon:24kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 636.259674] Node 0 DMA free:10532kB min:216kB low:268kB high:320kB active_anon:2408kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.286367] lowmem_reserve[]: 0 2580 2580 2580 [ 636.291092] Node 0 DMA32 free:36332kB min:36468kB low:45584kB high:54700kB active_anon:1949540kB inactive_anon:712kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45520kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 636.426187] lowmem_reserve[]: 0 0 0 0 [ 636.446175] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.487589] lowmem_reserve[]: 0 0 0 0 [ 636.491581] Node 1 Normal free:53252kB min:53420kB low:66772kB high:80124kB active_anon:3444556kB inactive_anon:24kB active_file:44kB inactive_file:36kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18432kB pagetables:48188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.560106] lowmem_reserve[]: 0 0 0 0 [ 636.563977] Node 0 DMA: 1*4kB (U) 16*8kB (UME) 6*16kB (UM) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10532kB [ 636.645991] Node 0 DMA32: 39*4kB (UME) 769*8kB (UME) 743*16kB (UME) 323*32kB (UM) 7*64kB (UME) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36532kB [ 636.680085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 636.730585] Node 1 Normal: 184*4kB (UME) 133*8kB (UME) 186*16kB (UME) 633*32kB (UME) 157*64kB (UME) 28*128kB (U) 2*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53512kB [ 636.799071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.808885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 636.854789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.893155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 636.936659] 265 total pagecache pages [ 636.955226] 0 pages in swap cache [ 636.958799] Swap cache stats: add 0, delete 0, find 0/0 [ 636.979178] Free swap = 0kB [ 636.982279] Total swap = 0kB [ 636.985299] 1965979 pages RAM [ 636.988414] 0 pages HighMem/MovableOnly [ 637.020102] 333229 pages reserved [ 637.023597] 0 pages cma reserved [ 637.026961] Out of memory: Kill process 19071 (syz-executor.0) score 1007 or sacrifice child [ 637.097803] Killed process 19071 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 637.670131] net_ratelimit: 26 callbacks suppressed [ 637.670137] protocol 88fb is buggy, dev hsr_slave_0 [ 637.680232] protocol 88fb is buggy, dev hsr_slave_1 [ 637.685334] protocol 88fb is buggy, dev hsr_slave_0 [ 637.690459] protocol 88fb is buggy, dev hsr_slave_1 [ 638.230202] protocol 88fb is buggy, dev hsr_slave_0 [ 638.235480] protocol 88fb is buggy, dev hsr_slave_1 [ 638.240785] protocol 88fb is buggy, dev hsr_slave_0 [ 638.245886] protocol 88fb is buggy, dev hsr_slave_1 [ 638.251060] protocol 88fb is buggy, dev hsr_slave_0 [ 638.256136] protocol 88fb is buggy, dev hsr_slave_1 04:33:53 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:53 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:53 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = getpgrp(0x0) waitid(0x2, r5, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r5, 0x9, &(0x7f00000001c0)=""/68) r6 = getpgid(r5) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)=0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = inotify_init1(0x0) r13 = gettid() fcntl$setown(r12, 0x8, r13) r14 = getpid() r15 = socket(0xa, 0x3, 0x8) r16 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r18 = gettid() waitid(0x83b895581628fca4, r18, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r17, @ANYRESDEC=r18]], 0xfffffffffffffe56}}, 0x20004850) r19 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r20 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r21 = dup2(r20, r19) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r21, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r21, 0xc08c5334, &(0x7f0000000200)) r22 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r22) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r22}, 0x0) kcmp(r22, r22, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r22, 0x0, 0x0) r23 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r22, r23, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r18, r21, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r24}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r24}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r24}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r24}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r24}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r13, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r11, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r10, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r8, r7, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r6, r4, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r24}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r24}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r24}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r24}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='#ppp0&5\x00', r24}, 0x30) r26 = syz_open_procfs(r25, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r26, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 638.505274] devpts: called with bogus options [ 638.511969] devpts: called with bogus options 04:33:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0xe7e1566c7adac875) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:33:55 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 640.902742] devpts: called with bogus options 04:33:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:33:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r0, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), 0x4171ef65f550d6d2) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/6, 0x6}) [ 640.978607] devpts: called with bogus options 04:33:56 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 641.019828] devpts: called with bogus options 04:33:56 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='net/dev_snmp6\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 641.123065] devpts: called with bogus options [ 643.910124] net_ratelimit: 26 callbacks suppressed [ 643.910128] protocol 88fb is buggy, dev hsr_slave_0 [ 643.920848] protocol 88fb is buggy, dev hsr_slave_1 [ 643.925936] protocol 88fb is buggy, dev hsr_slave_0 [ 643.931062] protocol 88fb is buggy, dev hsr_slave_1 [ 644.470137] protocol 88fb is buggy, dev hsr_slave_0 [ 644.475505] protocol 88fb is buggy, dev hsr_slave_1 [ 644.480976] protocol 88fb is buggy, dev hsr_slave_0 [ 644.486617] protocol 88fb is buggy, dev hsr_slave_1 [ 644.494193] protocol 88fb is buggy, dev hsr_slave_0 [ 644.499399] protocol 88fb is buggy, dev hsr_slave_1 04:34:02 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:34:04 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x2, r6, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) r7 = getpgid(r6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = inotify_init1(0x0) r14 = gettid() fcntl$setown(r13, 0x8, r14) r15 = getpid() r16 = socket(0xa, 0x3, 0x8) r17 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r19 = gettid() waitid(0x83b895581628fca4, r19, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r18, @ANYRESDEC=r19]], 0xfffffffffffffe56}}, 0x20004850) r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r21 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r22 = dup2(r21, r20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r22, 0xc08c5334, &(0x7f0000000200)) r23 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r23}, 0x0) kcmp(r23, r23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r23, 0x0, 0x0) r24 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r23, r24, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r19, r22, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r25}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r12, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r11, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r9, r8, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r5, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r25}, 0x30) ptrace$cont(0x1f, r26, 0x3, 0x80) lseek(r0, 0x3, 0x0) [ 650.150191] net_ratelimit: 26 callbacks suppressed [ 650.155209] protocol 88fb is buggy, dev hsr_slave_0 [ 650.160277] protocol 88fb is buggy, dev hsr_slave_1 [ 650.165441] protocol 88fb is buggy, dev hsr_slave_0 [ 650.170531] protocol 88fb is buggy, dev hsr_slave_1 [ 650.710299] protocol 88fb is buggy, dev hsr_slave_0 [ 650.716304] protocol 88fb is buggy, dev hsr_slave_1 [ 650.721595] protocol 88fb is buggy, dev hsr_slave_0 [ 650.727230] protocol 88fb is buggy, dev hsr_slave_1 [ 650.732585] protocol 88fb is buggy, dev hsr_slave_0 [ 650.738140] protocol 88fb is buggy, dev hsr_slave_1 [ 653.366506] devpts: called with bogus options [ 653.482811] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 653.501115] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 653.507785] CPU: 1 PID: 22834 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 653.514835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.524412] Call Trace: [ 653.527004] dump_stack+0x138/0x197 [ 653.530636] dump_header+0x177/0x6cd [ 653.534380] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 653.539480] ? ___ratelimit+0x55/0x537 [ 653.543359] oom_kill_process.cold+0x10/0xadd [ 653.547839] ? oom_unkillable_task+0x294/0x390 [ 653.552420] ? lock_downgrade+0x740/0x740 [ 653.556553] out_of_memory+0x2ee/0x1180 [ 653.560524] ? lock_acquire+0x16f/0x430 [ 653.564483] ? oom_killer_disable+0x1d0/0x1d0 [ 653.568962] ? __alloc_pages_slowpath+0xca4/0x2930 [ 653.573882] __alloc_pages_slowpath+0x2251/0x2930 [ 653.578715] ? warn_alloc+0xf0/0xf0 [ 653.582340] ? __might_sleep+0x93/0xb0 [ 653.586219] __alloc_pages_nodemask+0x62c/0x7a0 [ 653.590871] ? __alloc_pages_slowpath+0x2930/0x2930 [ 653.595869] ? __lock_acquire+0x5f7/0x4620 [ 653.600091] ? __handle_mm_fault+0x1c49/0x3470 [ 653.604661] alloc_pages_vma+0xc9/0x4c0 [ 653.608618] __handle_mm_fault+0x18f3/0x3470 [ 653.613010] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 653.617747] ? find_held_lock+0x35/0x130 [ 653.621805] ? handle_mm_fault+0x1b6/0x7c0 [ 653.626036] handle_mm_fault+0x293/0x7c0 [ 653.630080] __get_user_pages+0x465/0x1220 [ 653.635545] ? follow_page_mask+0x1560/0x1560 [ 653.640035] get_user_pages_remote+0x1bf/0x3a0 [ 653.644605] process_vm_rw_core.isra.0+0x470/0xa60 [ 653.649626] ? __vunmap.cold+0x40/0x40 [ 653.653508] ? kasan_check_write+0x14/0x20 [ 653.657729] ? _copy_from_user+0x99/0x110 [ 653.661870] ? rw_copy_check_uvector+0x1f1/0x290 [ 653.666611] process_vm_rw+0x1cb/0x1e0 [ 653.670498] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 653.675596] ? __might_fault+0x110/0x1d0 [ 653.679671] ? find_held_lock+0x35/0x130 [ 653.683740] ? __might_fault+0x110/0x1d0 [ 653.687840] ? lock_downgrade+0x740/0x740 [ 653.692022] ? kasan_check_read+0x11/0x20 [ 653.696161] ? _copy_to_user+0x87/0xd0 [ 653.700042] ? put_timespec64+0xb4/0x100 [ 653.704094] ? nsecs_to_jiffies+0x30/0x30 [ 653.708265] SyS_process_vm_writev+0x42/0x60 [ 653.712661] ? SyS_process_vm_readv+0x60/0x60 [ 653.717158] do_syscall_64+0x1e8/0x640 [ 653.721031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 653.725865] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 653.731236] RIP: 0033:0x459f49 [ 653.734421] RSP: 002b:00007fc161848c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 653.742122] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 653.749388] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 000000000000089b [ 653.756660] RBP: 000000000075bfc8 R08: 0000000000000299 R09: 0000000000000000 [ 653.763920] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007fc1618496d4 [ 653.771189] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 653.792230] Mem-Info: [ 653.795555] active_anon:1348974 inactive_anon:184 isolated_anon:0 [ 653.795555] active_file:14 inactive_file:107 isolated_file:0 [ 653.795555] unevictable:0 dirty:0 writeback:0 unstable:0 [ 653.795555] slab_reclaimable:16693 slab_unreclaimable:108622 [ 653.795555] mapped:52280 shmem:242 pagetables:23466 bounce:0 [ 653.795555] free:25060 free_pcp:30 free_cma:0 [ 653.829504] Node 0 active_anon:1951996kB inactive_anon:708kB active_file:124kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209144kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 653.861646] Node 1 active_anon:3443900kB inactive_anon:28kB active_file:44kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 653.893398] Node 0 DMA free:10520kB min:216kB low:268kB high:320kB active_anon:2448kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.929262] lowmem_reserve[]: 0 2580 2580 2580 [ 653.933923] Node 0 DMA32 free:36492kB min:36468kB low:45584kB high:54700kB active_anon:1949568kB inactive_anon:708kB active_file:188kB inactive_file:300kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45524kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 653.963598] lowmem_reserve[]: 0 0 0 0 [ 653.967423] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.992717] lowmem_reserve[]: 0 0 0 0 [ 653.996515] Node 1 Normal free:53396kB min:53420kB low:66772kB high:80124kB active_anon:3443500kB inactive_anon:28kB active_file:256kB inactive_file:256kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18272kB pagetables:48328kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 654.026857] lowmem_reserve[]: 0 0 0 0 [ 654.030729] Node 0 DMA: 2*4kB (UE) 20*8kB (UME) 6*16kB (U) 7*32kB (UME) 3*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 654.046326] Node 0 DMA32: 19*4kB (ME) 783*8kB (UE) 732*16kB (UME) 325*32kB (UM) 6*64kB (UM) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36388kB [ 654.062351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 654.073939] Node 1 Normal: 108*4kB (ME) 152*8kB (UME) 110*16kB (UME) 657*32kB (UME) 160*64kB (UME) 38*128kB (UM) 0*256kB 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53872kB [ 654.090644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.099480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 654.108089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.117057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 654.125691] 404 total pagecache pages [ 654.129489] 0 pages in swap cache [ 654.132983] Swap cache stats: add 0, delete 0, find 0/0 [ 654.138347] Free swap = 0kB [ 654.141404] Total swap = 0kB [ 654.144416] 1965979 pages RAM [ 654.147506] 0 pages HighMem/MovableOnly [ 654.151504] 333229 pages reserved [ 654.157282] 0 pages cma reserved [ 654.160704] Out of memory: Kill process 19171 (syz-executor.0) score 1007 or sacrifice child [ 654.169365] Killed process 19171 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:34:09 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x5}, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x6, 0x3) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0', "eb10f21967d0ef8edac352d11aebf7ebc956fdaa177e48916e638143d146409001243dfb074d495e53db5adaa5fff01a6318b732f4e097a91323a0a5ac2adefe21609e4e8e50c75df60c9e899810bf9ea7dab0"}, 0x57) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:34:10 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 655.446075] devpts: called with bogus options [ 655.446090] devpts: called with bogus options 04:34:10 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x2, r6, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) r7 = getpgid(r6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = inotify_init1(0x0) r14 = gettid() fcntl$setown(r13, 0x8, r14) r15 = getpid() r16 = socket(0xa, 0x3, 0x8) r17 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r19 = gettid() waitid(0x83b895581628fca4, r19, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r18, @ANYRESDEC=r19]], 0xfffffffffffffe56}}, 0x20004850) r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r21 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r22 = dup2(r21, r20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r22, 0xc08c5334, &(0x7f0000000200)) r23 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r23}, 0x0) kcmp(r23, r23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r23, 0x0, 0x0) r24 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r23, r24, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r19, r22, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r25}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r12, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r11, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r9, r8, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r5, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r25}, 0x30) ptrace$cont(0x1f, r26, 0x3, 0x80) lseek(r0, 0x3, 0x0) [ 656.390162] net_ratelimit: 26 callbacks suppressed [ 656.390167] protocol 88fb is buggy, dev hsr_slave_0 [ 656.401357] protocol 88fb is buggy, dev hsr_slave_1 [ 656.406530] protocol 88fb is buggy, dev hsr_slave_0 [ 656.411652] protocol 88fb is buggy, dev hsr_slave_1 [ 656.950139] protocol 88fb is buggy, dev hsr_slave_0 [ 656.955492] protocol 88fb is buggy, dev hsr_slave_1 [ 656.961036] protocol 88fb is buggy, dev hsr_slave_0 [ 656.966088] protocol 88fb is buggy, dev hsr_slave_1 [ 656.971316] protocol 88fb is buggy, dev hsr_slave_0 [ 656.976682] protocol 88fb is buggy, dev hsr_slave_1 04:34:10 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4280, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) fremovexattr(r1, &(0x7f0000000080)=@random={'trusted.', '],.((\x00'}) [ 662.630164] net_ratelimit: 26 callbacks suppressed [ 662.630172] protocol 88fb is buggy, dev hsr_slave_0 [ 662.640308] protocol 88fb is buggy, dev hsr_slave_1 [ 662.645466] protocol 88fb is buggy, dev hsr_slave_0 [ 662.650601] protocol 88fb is buggy, dev hsr_slave_1 [ 663.190213] protocol 88fb is buggy, dev hsr_slave_0 [ 663.195839] protocol 88fb is buggy, dev hsr_slave_1 [ 663.201167] protocol 88fb is buggy, dev hsr_slave_0 [ 663.206941] protocol 88fb is buggy, dev hsr_slave_1 [ 663.212186] protocol 88fb is buggy, dev hsr_slave_0 [ 663.217353] protocol 88fb is buggy, dev hsr_slave_1 [ 668.870159] net_ratelimit: 26 callbacks suppressed [ 668.870164] protocol 88fb is buggy, dev hsr_slave_0 [ 668.880212] protocol 88fb is buggy, dev hsr_slave_1 [ 668.885294] protocol 88fb is buggy, dev hsr_slave_0 [ 668.890545] protocol 88fb is buggy, dev hsr_slave_1 [ 669.430180] protocol 88fb is buggy, dev hsr_slave_0 [ 669.435880] protocol 88fb is buggy, dev hsr_slave_1 [ 669.441185] protocol 88fb is buggy, dev hsr_slave_0 [ 669.447256] protocol 88fb is buggy, dev hsr_slave_1 [ 669.452682] protocol 88fb is buggy, dev hsr_slave_0 [ 669.457906] protocol 88fb is buggy, dev hsr_slave_1 [ 675.110132] net_ratelimit: 26 callbacks suppressed [ 675.110138] protocol 88fb is buggy, dev hsr_slave_0 [ 675.120243] protocol 88fb is buggy, dev hsr_slave_1 [ 675.125671] protocol 88fb is buggy, dev hsr_slave_0 [ 675.130792] protocol 88fb is buggy, dev hsr_slave_1 04:34:29 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 675.670184] protocol 88fb is buggy, dev hsr_slave_0 [ 675.675675] protocol 88fb is buggy, dev hsr_slave_1 [ 675.680862] protocol 88fb is buggy, dev hsr_slave_0 [ 675.686135] protocol 88fb is buggy, dev hsr_slave_1 [ 675.691418] protocol 88fb is buggy, dev hsr_slave_0 [ 675.696693] protocol 88fb is buggy, dev hsr_slave_1 [ 676.135976] devpts: called with bogus options [ 677.383026] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 677.395709] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 677.400515] CPU: 0 PID: 6917 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 677.407323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.416688] Call Trace: [ 677.419267] dump_stack+0x138/0x197 [ 677.422894] dump_header+0x177/0x6cd [ 677.426609] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 677.432601] ? ___ratelimit+0x55/0x537 [ 677.436861] oom_kill_process.cold+0x10/0xadd [ 677.441364] ? rcu_read_unlock_special+0x639/0xd40 [ 677.446308] ? lock_downgrade+0x740/0x740 [ 677.450773] out_of_memory+0x2ee/0x1180 [ 677.456167] ? lock_acquire+0x16f/0x430 [ 677.460785] ? oom_killer_disable+0x1d0/0x1d0 [ 677.465292] ? __alloc_pages_slowpath+0xca4/0x2930 [ 677.470227] __alloc_pages_slowpath+0x2251/0x2930 [ 677.475076] ? __alloc_pages_nodemask+0x639/0x7a0 [ 677.479951] ? warn_alloc+0xf0/0xf0 [ 677.483614] ? __might_sleep+0x93/0xb0 [ 677.487518] __alloc_pages_nodemask+0x62c/0x7a0 [ 677.492202] ? __alloc_pages_slowpath+0x2930/0x2930 [ 677.497917] ? lock_downgrade+0x740/0x740 [ 677.502060] ? find_get_entry+0x23c/0x520 [ 677.506198] alloc_pages_current+0xec/0x1e0 [ 677.511218] __page_cache_alloc+0x248/0x3e0 [ 677.515627] filemap_fault+0xcc9/0x19a0 [ 677.519604] ? radix_tree_next_chunk+0x43e/0x9a0 [ 677.524414] ? __lock_page_or_retry+0x8d0/0x8d0 [ 677.529086] ? lock_acquire+0x16f/0x430 [ 677.533067] ? ext4_filemap_fault+0x7b/0xb0 [ 677.537741] ext4_filemap_fault+0x83/0xb0 [ 677.541897] __do_fault+0x104/0x390 [ 677.545527] __handle_mm_fault+0x2460/0x3470 [ 677.549931] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 677.554728] ? find_held_lock+0x35/0x130 [ 677.558773] ? handle_mm_fault+0x1b6/0x7c0 [ 677.563016] handle_mm_fault+0x293/0x7c0 [ 677.567081] __do_page_fault+0x4c1/0xb80 [ 677.571145] ? vmalloc_fault+0xe30/0xe30 [ 677.575217] ? page_fault+0x2f/0x50 [ 677.578866] do_page_fault+0x71/0x511 [ 677.582664] ? page_fault+0x2f/0x50 [ 677.586643] page_fault+0x45/0x50 [ 677.590178] RIP: 0033:0x458b8a [ 677.593360] RSP: 002b:000000c439506f60 EFLAGS: 00010202 [ 677.598715] RAX: 00000000008a6489 RBX: 0000000000458b10 RCX: 0000000000000006 [ 677.605969] RDX: 000000c439506f78 RSI: 0000000000ece7d8 RDI: 000000c439507080 [ 677.613505] RBP: 000000c439506fc8 R08: 0000000000000000 R09: 0000000000000000 [ 677.620784] R10: 00000000009b3262 R11: 0000000000000004 R12: 0000000000000000 [ 677.628064] R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000100 [ 677.636304] Mem-Info: [ 677.638745] active_anon:1349738 inactive_anon:184 isolated_anon:0 [ 677.638745] active_file:36 inactive_file:32 isolated_file:0 [ 677.638745] unevictable:0 dirty:0 writeback:0 unstable:0 [ 677.638745] slab_reclaimable:16612 slab_unreclaimable:108148 [ 677.638745] mapped:52243 shmem:242 pagetables:23495 bounce:0 [ 677.638745] free:25105 free_pcp:30 free_cma:0 [ 677.676974] Node 0 active_anon:1954184kB inactive_anon:712kB active_file:28kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208972kB dirty:0kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 677.705389] Node 1 active_anon:3444768kB inactive_anon:24kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.732630] Node 0 DMA free:10532kB min:216kB low:268kB high:320kB active_anon:2408kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.762413] lowmem_reserve[]: 0 2580 2580 2580 [ 677.767490] Node 0 DMA32 free:36360kB min:36468kB low:45584kB high:54700kB active_anon:1951776kB inactive_anon:712kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45528kB bounce:0kB free_pcp:196kB local_pcp:120kB free_cma:0kB [ 677.798209] lowmem_reserve[]: 0 0 0 0 [ 677.802236] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.828011] lowmem_reserve[]: 0 0 0 0 [ 677.832590] Node 1 Normal free:53388kB min:53420kB low:66772kB high:80124kB active_anon:3444768kB inactive_anon:24kB active_file:60kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18240kB pagetables:48440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.863079] lowmem_reserve[]: 0 0 0 0 [ 677.866901] Node 0 DMA: 3*4kB (ME) 17*8kB (UME) 5*16kB (U) 6*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10532kB [ 677.884401] Node 0 DMA32: 69*4kB (ME) 914*8kB (UME) 702*16kB (UME) 307*32kB (UM) 6*64kB (UM) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 36580kB [ 677.924425] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.935557] Node 1 Normal: 110*4kB (UME) 193*8kB (UME) 81*16kB (UME) 665*32kB (UME) 163*64kB (UME) 31*128kB (UM) 1*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53552kB [ 677.953383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.962841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.972505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.981536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.990268] 327 total pagecache pages [ 677.994079] 0 pages in swap cache [ 677.997533] Swap cache stats: add 0, delete 0, find 0/0 [ 678.002927] Free swap = 0kB [ 678.005941] Total swap = 0kB [ 678.008985] 1965979 pages RAM [ 678.012137] 0 pages HighMem/MovableOnly [ 678.016109] 333229 pages reserved [ 678.019567] 0 pages cma reserved [ 678.023124] Out of memory: Kill process 19233 (syz-executor.0) score 1007 or sacrifice child [ 678.032502] Killed process 19233 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:34:34 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x2, r6, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) r7 = getpgid(r6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = inotify_init1(0x0) r14 = gettid() fcntl$setown(r13, 0x8, r14) r15 = getpid() r16 = socket(0xa, 0x3, 0x8) r17 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r19 = gettid() waitid(0x83b895581628fca4, r19, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r18, @ANYRESDEC=r19]], 0xfffffffffffffe56}}, 0x20004850) r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r21 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r22 = dup2(r21, r20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r22, 0xc08c5334, &(0x7f0000000200)) r23 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r23}, 0x0) kcmp(r23, r23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r23, 0x0, 0x0) r24 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r23, r24, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r19, r22, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r25}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r12, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r11, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r9, r8, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r5, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r25}, 0x30) ptrace$cont(0x1f, r26, 0x3, 0x80) lseek(r0, 0x3, 0x0) [ 679.809609] devpts: called with bogus options [ 679.809990] devpts: called with bogus options [ 681.350154] net_ratelimit: 26 callbacks suppressed [ 681.350161] protocol 88fb is buggy, dev hsr_slave_0 [ 681.360266] protocol 88fb is buggy, dev hsr_slave_1 [ 681.365370] protocol 88fb is buggy, dev hsr_slave_0 [ 681.370465] protocol 88fb is buggy, dev hsr_slave_1 [ 681.910113] protocol 88fb is buggy, dev hsr_slave_0 [ 681.915323] protocol 88fb is buggy, dev hsr_slave_1 [ 681.920753] protocol 88fb is buggy, dev hsr_slave_0 [ 681.926351] protocol 88fb is buggy, dev hsr_slave_1 [ 681.931817] protocol 88fb is buggy, dev hsr_slave_0 [ 681.937016] protocol 88fb is buggy, dev hsr_slave_1 04:34:41 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) [ 687.590142] net_ratelimit: 26 callbacks suppressed [ 687.590147] protocol 88fb is buggy, dev hsr_slave_0 [ 687.600431] protocol 88fb is buggy, dev hsr_slave_1 [ 687.605501] protocol 88fb is buggy, dev hsr_slave_0 [ 687.610603] protocol 88fb is buggy, dev hsr_slave_1 [ 688.150169] protocol 88fb is buggy, dev hsr_slave_0 [ 688.155633] protocol 88fb is buggy, dev hsr_slave_1 [ 688.161037] protocol 88fb is buggy, dev hsr_slave_0 [ 688.166365] protocol 88fb is buggy, dev hsr_slave_1 [ 688.171707] protocol 88fb is buggy, dev hsr_slave_0 [ 688.177381] protocol 88fb is buggy, dev hsr_slave_1 04:34:44 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 692.972409] devpts: called with bogus options [ 693.748891] devpts: called with bogus options [ 693.840146] net_ratelimit: 26 callbacks suppressed [ 693.840153] protocol 88fb is buggy, dev hsr_slave_0 [ 693.850295] protocol 88fb is buggy, dev hsr_slave_1 [ 693.855452] protocol 88fb is buggy, dev hsr_slave_0 [ 693.860583] protocol 88fb is buggy, dev hsr_slave_1 [ 694.156027] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 694.169249] rsyslogd cpuset=/ mems_allowed=0-1 [ 694.174209] CPU: 1 PID: 6758 Comm: rsyslogd Not tainted 4.14.151 #0 [ 694.180636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.189976] Call Trace: [ 694.192561] dump_stack+0x138/0x197 [ 694.196184] dump_header+0x177/0x6cd [ 694.199973] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 694.205065] ? ___ratelimit+0x55/0x537 [ 694.208950] oom_kill_process.cold+0x10/0xadd [ 694.213512] ? rcu_read_unlock_special+0x895/0xd40 [ 694.218423] ? lock_downgrade+0x740/0x740 [ 694.222559] out_of_memory+0x2ee/0x1180 [ 694.226512] ? lock_acquire+0x16f/0x430 [ 694.230478] ? oom_killer_disable+0x1d0/0x1d0 [ 694.234954] ? __alloc_pages_slowpath+0xca4/0x2930 [ 694.240220] __alloc_pages_slowpath+0x2251/0x2930 [ 694.245071] ? __alloc_pages_nodemask+0x639/0x7a0 [ 694.249942] ? warn_alloc+0xf0/0xf0 [ 694.253666] ? __might_sleep+0x93/0xb0 [ 694.257805] __alloc_pages_nodemask+0x62c/0x7a0 [ 694.262469] ? __alloc_pages_slowpath+0x2930/0x2930 [ 694.267476] ? lock_downgrade+0x740/0x740 [ 694.271871] ? find_get_entry+0x23c/0x520 [ 694.276116] alloc_pages_current+0xec/0x1e0 [ 694.280421] __page_cache_alloc+0x248/0x3e0 [ 694.284745] filemap_fault+0xcc9/0x19a0 [ 694.288711] ? radix_tree_next_chunk+0x43e/0x9a0 [ 694.293475] ? __lock_page_or_retry+0x8d0/0x8d0 [ 694.298141] ? lock_acquire+0x16f/0x430 [ 694.302106] ? ext4_filemap_fault+0x7b/0xb0 [ 694.306514] ext4_filemap_fault+0x83/0xb0 [ 694.310731] __do_fault+0x104/0x390 [ 694.314355] __handle_mm_fault+0x2460/0x3470 [ 694.319021] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 694.323756] ? find_held_lock+0x35/0x130 [ 694.327800] ? handle_mm_fault+0x1b6/0x7c0 [ 694.332039] handle_mm_fault+0x293/0x7c0 [ 694.336430] __do_page_fault+0x4c1/0xb80 [ 694.340472] ? vmalloc_fault+0xe30/0xe30 [ 694.344526] ? page_fault+0x2f/0x50 [ 694.348926] do_page_fault+0x71/0x511 [ 694.353152] ? page_fault+0x2f/0x50 [ 694.356767] page_fault+0x45/0x50 [ 694.360206] RIP: 0033:0x7f05ef07f270 [ 694.365892] RSP: 002b:00007f05ecca8d58 EFLAGS: 00010206 [ 694.371245] RAX: 0000000000000000 RBX: 00007f05ee4de5a3 RCX: 0000000000000000 [ 694.378533] RDX: 000144b707e32b00 RSI: 00007f05ee4de5a3 RDI: 00007f05ee4de5a3 [ 694.385795] RBP: 00007f05e80008b0 R08: 0000000000000000 R09: 00000000000007e3 [ 694.393056] R10: 0000000000000012 R11: a3d70a3d70a3d70b R12: 0000000000000000 [ 694.400498] R13: 00007f05ee4de5a3 R14: 0000000000000001 R15: 00007f05ee4dd5d4 [ 694.410320] protocol 88fb is buggy, dev hsr_slave_0 [ 694.415859] protocol 88fb is buggy, dev hsr_slave_1 [ 694.419923] Mem-Info: [ 694.420994] protocol 88fb is buggy, dev hsr_slave_0 [ 694.423714] active_anon:1349999 inactive_anon:184 isolated_anon:0 [ 694.423714] active_file:39 inactive_file:49 isolated_file:0 [ 694.423714] unevictable:0 dirty:4 writeback:0 unstable:0 [ 694.423714] slab_reclaimable:16424 slab_unreclaimable:107918 [ 694.423714] mapped:52316 shmem:242 pagetables:23521 bounce:0 [ 694.423714] free:25189 free_pcp:76 free_cma:0 [ 694.428829] protocol 88fb is buggy, dev hsr_slave_1 [ 694.462798] Node 0 active_anon:1955636kB inactive_anon:712kB active_file:132kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209260kB dirty:12kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 694.467468] protocol 88fb is buggy, dev hsr_slave_0 [ 694.495912] Node 1 active_anon:3444360kB inactive_anon:24kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.500618] protocol 88fb is buggy, dev hsr_slave_1 [ 694.527622] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.559630] lowmem_reserve[]: 0 2580 2580 2580 [ 694.565069] Node 0 DMA32 free:36884kB min:36468kB low:45584kB high:54700kB active_anon:1953248kB inactive_anon:712kB active_file:132kB inactive_file:272kB unevictable:0kB writepending:12kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14624kB pagetables:45532kB bounce:0kB free_pcp:132kB local_pcp:124kB free_cma:0kB [ 694.598418] lowmem_reserve[]: 0 0 0 0 [ 694.602803] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.628315] lowmem_reserve[]: 0 0 0 0 [ 694.632232] Node 1 Normal free:53416kB min:53420kB low:66772kB high:80124kB active_anon:3444360kB inactive_anon:24kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18368kB pagetables:48540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.661395] lowmem_reserve[]: 0 0 0 0 [ 694.665219] Node 0 DMA: 2*4kB (ME) 12*8kB (UME) 6*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 694.681599] Node 0 DMA32: 168*4kB (UE) 983*8kB (UE) 715*16kB (UME) 297*32kB (U) 3*64kB (UM) 1*128kB (U) 2*256kB (ME) 2*512kB (ME) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 36456kB [ 694.698940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 694.709729] Node 1 Normal: 103*4kB (UME) 171*8kB (UME) 39*16kB (UME) 673*32kB (UME) 165*64kB (UME) 32*128kB (UM) 2*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53444kB [ 694.727402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.736417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 694.745069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.754433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 694.763169] 399 total pagecache pages [ 694.766977] 0 pages in swap cache [ 694.770518] Swap cache stats: add 0, delete 0, find 0/0 [ 694.775871] Free swap = 0kB [ 694.778900] Total swap = 0kB [ 694.781942] 1965979 pages RAM [ 694.785141] 0 pages HighMem/MovableOnly [ 694.789101] 333229 pages reserved [ 694.792576] 0 pages cma reserved [ 694.795922] Out of memory: Kill process 19316 (syz-executor.0) score 1007 or sacrifice child [ 694.804579] Killed process 19316 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:34:51 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:34:51 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) 04:34:51 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x20042, 0x0) sendto$rose(r0, &(0x7f00000006c0)="a33dac2268d7c8ff7363169fd04221d05a54131cd17ab9303ebe507252604491a4f353959393ff650d6b418cdf831c3c48370b250baf316a184714cdf11a9355da19ee7088e042fd85a8e9f7109f4683fa331e0268a99d15352680923027885548e8fd0d1fff7e4a02d36ec8996283d92bfd097c12c8008e81f964d7fa7ebf5246cb0588addf15e140", 0x89, 0x8000, &(0x7f0000000780)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/create\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000640)=0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$sndseq(r4, &(0x7f00000017c0)=[{0x20, 0x1, 0x6, 0xc7, @tick=0x6, {0x4, 0x3f}, {0x1, 0x8}, @control={0x7, 0x2, 0x3f}}, {0x8, 0x3, 0x0, 0x0, @tick=0x1, {0x8b, 0x81}, {0x3, 0x4}, @raw32={[0x1f, 0x6d5, 0xecb9]}}, {0x96, 0xde, 0x40, 0x42, @tick=0x37b, {0xf7, 0xff}, {0x7f, 0x7}, @note={0x9, 0x9, 0x1, 0x7, 0x40}}, {0x9, 0x5, 0x40, 0x7, @tick=0x10001, {0x3, 0x3f}, {0x0, 0x73}, @raw8={"bb46c0b7c1620df0e8b3b62e"}}, {0x0, 0x3a, 0x6, 0x46, @tick, {0x3, 0x5}, {0x1}, @connect={{0x5, 0x9}, {0xff}}}, {0x9, 0x81, 0x81, 0xa5, @time, {0x7, 0x3f}, {0x1f, 0x6}, @addr={0xb9, 0x80}}, {0xf9, 0x3, 0x8, 0x6, @time={0x0, 0x989680}, {0x3f, 0x7}, {0x1, 0x2}, @raw8={"5b4888dd139344a1284dd44d"}}, {0x1f, 0x81, 0xff, 0x2, @time={0x0, 0x1c9c380}, {0x40, 0x1f}, {0x81}, @raw32={[0x0, 0x5, 0x3]}}], 0x180) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x140, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x720}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xeb13}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x10}}, @IPVS_SVC_ATTR_PORT={0xfffffffffffffd22, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xfffffffffffffe5d, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5eb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x64040891}, 0x800) getsockopt(r5, 0x9, 0x6, &(0x7f0000000380)=""/221, &(0x7f00000000c0)=0xdd) finit_module(r2, &(0x7f0000000000)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', 0x1) 04:34:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000300)) lseek(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r2, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)={r3, 0x1}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={r3, 0x2}) 04:34:51 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) [ 696.821078] devpts: called with bogus options [ 696.829665] devpts: called with bogus options [ 696.885427] devpts: called with bogus options 04:34:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r0, 0x3, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x9, 0x58d4, 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x2, 0x8, 0xfb, "b8f0281b7726e5784a85ff597e46850f5d245f25d74bb45d7cc7f031c3916a33a86d09cb0e567f24f63a7ed45908ac38a6f2c207b2d978734ff3ccc323ecf0", 0xc}, 0x60) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='security\x00', 0x0) [ 700.070231] net_ratelimit: 26 callbacks suppressed [ 700.070244] protocol 88fb is buggy, dev hsr_slave_0 [ 700.080327] protocol 88fb is buggy, dev hsr_slave_1 [ 700.085413] protocol 88fb is buggy, dev hsr_slave_0 [ 700.090520] protocol 88fb is buggy, dev hsr_slave_1 04:34:55 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:34:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:34:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x2, 0x0, 0x5}, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid\x00') 04:34:55 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000300)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3, 0x20, 0x1, 0x4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x80, 0x8, 0x203, 0xff, 0x10000, 0x2c, 0x40, 0x3, r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) 04:34:55 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x202000, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x47, 0x7, 0x0, 0x12, 0x0, 0x4, 0x82008, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffff815, 0x4, @perf_config_ext={0x8000000000000000, 0xc5d1}, 0x21022, 0x1, 0x6, 0x6, 0x3, 0x7fffffff}, r0, 0x10, r1, 0x17) getpid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20}, 0x0) sched_setattr(r2, &(0x7f00000000c0)={0x30, 0x0, 0x1, 0x0, 0x2, 0x1009, 0x0, 0x2}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x100000001, 0x100000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r9, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000400), r10, 0x4}}, 0x18) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r11, 0x3, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000240)={0x0, r12}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r13 = getpid() sched_setattr(r13, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x5, 0x4, 0x0, 0x7}, 0x0) r14 = syz_open_procfs(r13, &(0x7f0000000140)='pagemap\x00') lseek(r14, 0x3, 0x0) 04:34:55 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 700.504610] devpts: called with bogus options [ 700.522602] devpts: called with bogus options 04:34:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x401) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) [ 700.604223] devpts: called with bogus options [ 700.630107] protocol 88fb is buggy, dev hsr_slave_0 [ 700.635340] protocol 88fb is buggy, dev hsr_slave_1 [ 700.640512] protocol 88fb is buggy, dev hsr_slave_0 [ 700.645594] protocol 88fb is buggy, dev hsr_slave_1 [ 700.680658] sctp: [Deprecated]: syz-executor.1 (pid 22927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.680658] Use struct sctp_sack_info instead [ 700.720671] protocol 88fb is buggy, dev hsr_slave_0 [ 700.726206] protocol 88fb is buggy, dev hsr_slave_1 [ 701.450432] sctp: [Deprecated]: syz-executor.1 (pid 22938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.450432] Use struct sctp_sack_info instead [ 701.857323] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 701.870777] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 701.876253] CPU: 1 PID: 22925 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 701.883283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.892631] Call Trace: [ 701.895216] dump_stack+0x138/0x197 [ 701.898936] dump_header+0x177/0x6cd [ 701.902669] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 701.907765] ? ___ratelimit+0x55/0x537 [ 701.911643] oom_kill_process.cold+0x10/0xadd [ 701.916128] ? oom_unkillable_task+0x294/0x390 [ 701.921072] ? lock_downgrade+0x740/0x740 [ 701.925215] out_of_memory+0x2ee/0x1180 [ 701.929321] ? lock_acquire+0x16f/0x430 [ 701.934081] ? oom_killer_disable+0x1d0/0x1d0 [ 701.938568] ? __alloc_pages_slowpath+0xca4/0x2930 [ 701.943486] __alloc_pages_slowpath+0x2251/0x2930 [ 701.948362] ? warn_alloc+0xf0/0xf0 [ 701.951986] ? __might_sleep+0x93/0xb0 [ 701.955864] __alloc_pages_nodemask+0x62c/0x7a0 [ 701.960525] ? __alloc_pages_slowpath+0x2930/0x2930 [ 701.965536] ? __lock_acquire+0x5f7/0x4620 [ 701.969934] ? __handle_mm_fault+0x1c49/0x3470 [ 701.974517] alloc_pages_vma+0xc9/0x4c0 [ 701.978482] __handle_mm_fault+0x18f3/0x3470 [ 701.982887] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 701.987629] ? find_held_lock+0x35/0x130 [ 701.991681] ? handle_mm_fault+0x1b6/0x7c0 [ 701.995915] handle_mm_fault+0x293/0x7c0 [ 701.999968] __get_user_pages+0x465/0x1220 [ 702.004195] ? follow_page_mask+0x1560/0x1560 [ 702.008685] get_user_pages_remote+0x1bf/0x3a0 [ 702.013264] process_vm_rw_core.isra.0+0x470/0xa60 [ 702.018218] ? __vunmap.cold+0x40/0x40 [ 702.022136] ? kasan_check_write+0x14/0x20 [ 702.026394] ? _copy_from_user+0x99/0x110 [ 702.030540] ? rw_copy_check_uvector+0x1f1/0x290 [ 702.035641] process_vm_rw+0x1cb/0x1e0 [ 702.039534] ? process_vm_rw_core.isra.0+0xa60/0xa60 [ 702.044656] ? __might_fault+0x110/0x1d0 [ 702.048716] ? find_held_lock+0x35/0x130 [ 702.052769] ? __might_fault+0x110/0x1d0 [ 702.056855] ? lock_downgrade+0x740/0x740 [ 702.061005] ? kasan_check_read+0x11/0x20 [ 702.065149] ? _copy_to_user+0x87/0xd0 [ 702.069026] ? put_timespec64+0xb4/0x100 [ 702.073072] ? nsecs_to_jiffies+0x30/0x30 [ 702.080817] SyS_process_vm_writev+0x42/0x60 [ 702.086468] ? SyS_process_vm_readv+0x60/0x60 [ 702.090960] do_syscall_64+0x1e8/0x640 [ 702.094849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.100051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.105251] RIP: 0033:0x459f49 [ 702.108432] RSP: 002b:00007fc161869c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 702.116129] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459f49 [ 702.124183] RDX: 0000000000000329 RSI: 0000000020c22000 RDI: 00000000000008b5 [ 702.131748] RBP: 000000000075bf20 R08: 0000000000000299 R09: 0000000000000000 [ 702.139014] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 00007fc16186a6d4 [ 702.146377] R13: 00000000004c76c5 R14: 00000000004dd2e8 R15: 00000000ffffffff [ 702.162122] Mem-Info: [ 702.164577] active_anon:1349919 inactive_anon:182 isolated_anon:0 [ 702.164577] active_file:8 inactive_file:45 isolated_file:7 [ 702.164577] unevictable:0 dirty:3 writeback:0 unstable:0 [ 702.164577] slab_reclaimable:16347 slab_unreclaimable:108070 [ 702.164577] mapped:52251 shmem:242 pagetables:23629 bounce:0 [ 702.164577] free:25061 free_pcp:62 free_cma:0 [ 702.198159] Node 0 active_anon:1955920kB inactive_anon:708kB active_file:12kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:209004kB dirty:12kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 702.226082] Node 1 active_anon:3443756kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 702.253396] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.284005] lowmem_reserve[]: 0 2580 2580 2580 [ 702.288652] Node 0 DMA32 free:36392kB min:36468kB low:45584kB high:54700kB active_anon:1953532kB inactive_anon:708kB active_file:12kB inactive_file:192kB unevictable:0kB writepending:12kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45532kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 702.320130] lowmem_reserve[]: 0 0 0 0 [ 702.323975] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.349905] lowmem_reserve[]: 0 0 0 0 [ 702.353812] Node 1 Normal free:67816kB min:53420kB low:66772kB high:80124kB active_anon:3428856kB inactive_anon:20kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18560kB pagetables:48824kB bounce:0kB free_pcp:652kB local_pcp:652kB free_cma:0kB [ 702.383692] lowmem_reserve[]: 0 0 0 0 [ 702.387495] Node 0 DMA: 2*4kB (ME) 12*8kB (UME) 6*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 702.404123] Node 0 DMA32: 268*4kB (ME) 977*8kB (UME) 731*16kB (UME) 307*32kB (UM) 3*64kB (UM) 1*128kB (U) 2*256kB (ME) 2*512kB (ME) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 37384kB [ 702.420936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 702.432033] Node 1 Normal: 1759*4kB (UME) 383*8kB (UME) 280*16kB (UME) 711*32kB (UME) 177*64kB (UME) 35*128kB (UM) 1*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 67732kB [ 702.449320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.458937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.467647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.476847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.485534] 342 total pagecache pages [ 702.490919] 0 pages in swap cache [ 702.494412] Swap cache stats: add 0, delete 0, find 0/0 [ 702.499918] Free swap = 0kB [ 702.503064] Total swap = 0kB [ 702.506252] 1965979 pages RAM [ 702.509355] 0 pages HighMem/MovableOnly [ 702.513377] 333229 pages reserved [ 702.516822] 0 pages cma reserved [ 702.520588] Out of memory: Kill process 22911 (syz-executor.3) score 1007 or sacrifice child [ 706.310136] net_ratelimit: 26 callbacks suppressed [ 706.310143] protocol 88fb is buggy, dev hsr_slave_0 [ 706.321028] protocol 88fb is buggy, dev hsr_slave_1 [ 706.326947] protocol 88fb is buggy, dev hsr_slave_0 [ 706.332147] protocol 88fb is buggy, dev hsr_slave_1 [ 706.870181] protocol 88fb is buggy, dev hsr_slave_0 [ 706.875414] protocol 88fb is buggy, dev hsr_slave_1 [ 706.880626] protocol 88fb is buggy, dev hsr_slave_0 [ 706.885969] protocol 88fb is buggy, dev hsr_slave_1 04:35:01 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) ioctl$KDENABIO(r0, 0x4b36) [ 706.950245] protocol 88fb is buggy, dev hsr_slave_0 [ 706.956647] protocol 88fb is buggy, dev hsr_slave_1 04:35:04 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:35:04 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7ff, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) [ 712.550142] net_ratelimit: 26 callbacks suppressed [ 712.550149] protocol 88fb is buggy, dev hsr_slave_0 [ 712.560944] protocol 88fb is buggy, dev hsr_slave_1 [ 712.566428] protocol 88fb is buggy, dev hsr_slave_0 [ 712.572014] protocol 88fb is buggy, dev hsr_slave_1 [ 713.110149] protocol 88fb is buggy, dev hsr_slave_0 [ 713.115485] protocol 88fb is buggy, dev hsr_slave_1 [ 713.121756] protocol 88fb is buggy, dev hsr_slave_0 [ 713.127165] protocol 88fb is buggy, dev hsr_slave_1 [ 713.190162] protocol 88fb is buggy, dev hsr_slave_0 [ 713.195287] protocol 88fb is buggy, dev hsr_slave_1 04:35:08 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 715.551031] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 715.564437] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 715.569832] CPU: 0 PID: 22963 Comm: syz-executor.2 Not tainted 4.14.151 #0 [ 715.576854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.586474] Call Trace: [ 715.589054] dump_stack+0x138/0x197 [ 715.592759] dump_header+0x177/0x6cd [ 715.596560] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 715.601750] ? ___ratelimit+0x55/0x537 [ 715.605647] oom_kill_process.cold+0x10/0xadd [ 715.610138] ? oom_unkillable_task+0x294/0x390 [ 715.614805] ? lock_downgrade+0x740/0x740 [ 715.618937] out_of_memory+0x2ee/0x1180 [ 715.622916] ? lock_acquire+0x16f/0x430 [ 715.626941] ? oom_killer_disable+0x1d0/0x1d0 [ 715.631453] ? __alloc_pages_slowpath+0xca4/0x2930 [ 715.636366] __alloc_pages_slowpath+0x2251/0x2930 [ 715.641237] ? warn_alloc+0xf0/0xf0 [ 715.644874] ? __might_sleep+0x93/0xb0 [ 715.649727] __alloc_pages_nodemask+0x62c/0x7a0 [ 715.654730] ? wp_page_copy+0xd0c/0x1410 [ 715.658810] ? __alloc_pages_slowpath+0x2930/0x2930 [ 715.663916] ? __lock_acquire+0x5f7/0x4620 [ 715.668227] ? __lock_acquire+0x5f7/0x4620 [ 715.672470] alloc_pages_vma+0xc9/0x4c0 [ 715.676550] wp_page_copy+0xb13/0x1410 [ 715.680563] ? follow_pfn+0x220/0x220 [ 715.684825] do_wp_page+0x24b/0x12b0 [ 715.690040] ? finish_mkwrite_fault+0x620/0x620 [ 715.694803] __handle_mm_fault+0x1d4a/0x3470 [ 715.699227] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 715.704495] ? find_held_lock+0x35/0x130 [ 715.709578] ? handle_mm_fault+0x1b6/0x7c0 [ 715.714407] handle_mm_fault+0x293/0x7c0 [ 715.718490] __do_page_fault+0x4c1/0xb80 [ 715.722578] ? vmalloc_fault+0xe30/0xe30 [ 715.726773] do_page_fault+0x71/0x511 [ 715.730698] page_fault+0x25/0x50 [ 715.734138] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 715.740004] RSP: 0018:ffff8881e9ccfb30 EFLAGS: 00010206 [ 715.745539] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 715.752797] RDX: 0000000000001000 RSI: ffff888212559b00 RDI: 0000000020840000 [ 715.760079] RBP: ffff8881e9ccfb60 R08: ffffed10424ab400 R09: 0000000000000000 [ 715.767358] R10: ffffed10424ab3ff R11: ffff888212559fff R12: 000000002083f500 [ 715.774613] R13: ffff888212559000 R14: 00007ffffffff000 R15: 0000000020840500 [ 715.781920] ? copyout+0x9c/0xb0 [ 715.785285] copy_page_to_iter+0x31b/0xc40 [ 715.789521] pipe_to_user+0xb0/0x160 [ 715.793234] __splice_from_pipe+0x348/0x780 [ 715.797557] ? iter_to_pipe+0x4e0/0x4e0 [ 715.802052] vmsplice_to_user+0x197/0x1c0 [ 715.806196] ? __splice_from_pipe+0x780/0x780 [ 715.810673] ? __fget+0x210/0x370 [ 715.814125] ? find_held_lock+0x35/0x130 [ 715.818173] ? lock_downgrade+0x720/0x740 [ 715.822739] ? __fget+0x237/0x370 [ 715.826188] ? __fget_light+0x172/0x1f0 [ 715.830147] SyS_vmsplice+0x131/0x160 [ 715.833980] ? default_file_splice_write+0x80/0x80 [ 715.838917] do_syscall_64+0x1e8/0x640 [ 715.842872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 715.847796] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.853017] RIP: 0033:0x459f49 [ 715.856199] RSP: 002b:00007f4174217c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 715.863924] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459f49 [ 715.871466] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 715.878864] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 715.886205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41742186d4 [ 715.893545] R13: 00000000004c9c89 R14: 00000000004e1968 R15: 00000000ffffffff [ 715.915211] Mem-Info: [ 715.917663] active_anon:1350559 inactive_anon:184 isolated_anon:0 [ 715.917663] active_file:42 inactive_file:0 isolated_file:0 [ 715.917663] unevictable:0 dirty:0 writeback:11 unstable:0 [ 715.917663] slab_reclaimable:16285 slab_unreclaimable:107662 [ 715.917663] mapped:52214 shmem:242 pagetables:23589 bounce:0 [ 715.917663] free:25005 free_pcp:0 free_cma:0 [ 715.956993] Node 0 active_anon:1957020kB inactive_anon:708kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208940kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 715.986605] Node 1 active_anon:3445216kB inactive_anon:28kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:44kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 716.021694] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.053483] lowmem_reserve[]: 0 2580 2580 2580 [ 716.058207] Node 0 DMA32 free:36424kB min:36468kB low:45584kB high:54700kB active_anon:1954632kB inactive_anon:708kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.092113] lowmem_reserve[]: 0 0 0 0 [ 716.096035] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.122545] lowmem_reserve[]: 0 0 0 0 [ 716.126550] Node 1 Normal free:53180kB min:53420kB low:66772kB high:80124kB active_anon:3445240kB inactive_anon:28kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18464kB pagetables:48808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.156538] lowmem_reserve[]: 0 0 0 0 [ 716.160399] Node 0 DMA: 2*4kB (ME) 12*8kB (UME) 6*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 716.177672] Node 0 DMA32: 206*4kB (UME) 967*8kB (UE) 729*16kB (UE) 300*32kB (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (ME) 1*512kB (E) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 36416kB [ 716.195379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 716.206554] Node 1 Normal: 133*4kB (UME) 141*8kB (UE) 114*16kB (UE) 653*32kB (UME) 170*64kB (UME) 28*128kB (U) 0*256kB 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53180kB [ 716.223405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.232903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 716.241676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.250598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 716.259186] 275 total pagecache pages [ 716.263121] 0 pages in swap cache [ 716.266578] Swap cache stats: add 0, delete 0, find 0/0 [ 716.272015] Free swap = 0kB [ 716.275036] Total swap = 0kB [ 716.278047] 1965979 pages RAM [ 716.281269] 0 pages HighMem/MovableOnly [ 716.285326] 333229 pages reserved [ 716.288861] 0 pages cma reserved [ 716.292352] Out of memory: Kill process 19504 (syz-executor.0) score 1007 or sacrifice child [ 716.301149] Killed process 19504 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:35:11 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:35:11 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:11 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0xb3fd2d42c15f5eea, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0)=0x3f, 0x4) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000080)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) 04:35:11 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x20800, 0x0) accept4$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@remote, @netrom, @bcast, @default, @netrom, @netrom, @rose, @null]}, &(0x7f0000000080)=0x48, 0x40800) [ 716.548999] devpts: called with bogus options [ 716.550390] devpts: called with bogus options 04:35:11 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r2, 0x3, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) [ 717.685058] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 717.882676] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 717.888201] CPU: 0 PID: 22972 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 717.895212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.904583] Call Trace: [ 717.907274] dump_stack+0x138/0x197 [ 717.910905] dump_header+0x177/0x6cd [ 717.914618] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 717.920037] ? ___ratelimit+0x55/0x537 [ 717.923932] oom_kill_process.cold+0x10/0xadd [ 717.928423] ? oom_unkillable_task+0x294/0x390 [ 717.933013] ? lock_downgrade+0x740/0x740 [ 717.937165] out_of_memory+0x2ee/0x1180 [ 717.941137] ? lock_acquire+0x16f/0x430 [ 717.945374] ? oom_killer_disable+0x1d0/0x1d0 [ 717.949895] ? __alloc_pages_slowpath+0xca4/0x2930 [ 717.954857] __alloc_pages_slowpath+0x2251/0x2930 [ 717.959711] ? __alloc_pages_nodemask+0x639/0x7a0 [ 717.964756] ? warn_alloc+0xf0/0xf0 [ 717.968404] ? __might_sleep+0x93/0xb0 [ 717.972325] __alloc_pages_nodemask+0x62c/0x7a0 [ 717.977363] ? __alloc_pages_slowpath+0x2930/0x2930 [ 717.982645] ? lock_downgrade+0x740/0x740 [ 717.986883] ? find_get_entry+0x23c/0x520 [ 717.991034] alloc_pages_current+0xec/0x1e0 [ 717.995355] __page_cache_alloc+0x248/0x3e0 [ 717.999678] filemap_fault+0xcc9/0x19a0 [ 718.004013] ? __lock_page_or_retry+0x8d0/0x8d0 [ 718.008707] ? lock_acquire+0x16f/0x430 [ 718.012952] ? ext4_filemap_fault+0x7b/0xb0 [ 718.017296] ext4_filemap_fault+0x83/0xb0 [ 718.021458] __do_fault+0x104/0x390 [ 718.025799] __handle_mm_fault+0x2460/0x3470 [ 718.030216] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 718.034980] ? find_held_lock+0x35/0x130 [ 718.039038] ? handle_mm_fault+0x1b6/0x7c0 [ 718.043285] handle_mm_fault+0x293/0x7c0 [ 718.047347] __do_page_fault+0x4c1/0xb80 [ 718.051585] ? pci_mmcfg_check_reserved+0x150/0x150 [ 718.057471] ? vmalloc_fault+0xe30/0xe30 [ 718.061532] ? page_fault+0x2f/0x50 [ 718.065160] do_page_fault+0x71/0x511 [ 718.069070] ? page_fault+0x2f/0x50 [ 718.072796] page_fault+0x45/0x50 [ 718.076272] RIP: 0033:0x40c855 [ 718.079546] RSP: 002b:00007ffc79d312b0 EFLAGS: 00010206 [ 718.084912] RAX: 0000001b2c82aac0 RBX: 0000001b2c82aac0 RCX: 0000001b2d820000 [ 718.092183] RDX: 000000006953e27c RSI: 000000000000027c RDI: ffffffff6953e27c [ 718.099631] RBP: 0000001b2c82aac4 R08: 000000006953e27c R09: 000000006953e280 [ 718.107575] R10: 00007ffc79d313f0 R11: 0000000000000246 R12: 0000001b2c82aac8 [ 718.115112] R13: 00000000000af094 R14: 000000000075bfc8 R15: 000000000075c07c [ 718.130373] Mem-Info: [ 718.132832] active_anon:1350304 inactive_anon:183 isolated_anon:0 [ 718.132832] active_file:10 inactive_file:8 isolated_file:2 [ 718.132832] unevictable:0 dirty:0 writeback:0 unstable:0 [ 718.132832] slab_reclaimable:16276 slab_unreclaimable:107780 [ 718.132832] mapped:52226 shmem:242 pagetables:23625 bounce:0 [ 718.132832] free:25084 free_pcp:63 free_cma:0 [ 718.166113] Node 0 active_anon:1957308kB inactive_anon:708kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 718.193691] Node 1 active_anon:3443908kB inactive_anon:24kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.220400] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.333831] lowmem_reserve[]: 0 2580 2580 2580 [ 718.339169] Node 0 DMA32 free:36432kB min:36468kB low:45584kB high:54700kB active_anon:1954920kB inactive_anon:708kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45536kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 718.655925] lowmem_reserve[]: 0 0 0 0 [ 718.659795] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.790140] net_ratelimit: 26 callbacks suppressed [ 718.790147] protocol 88fb is buggy, dev hsr_slave_0 [ 718.800425] protocol 88fb is buggy, dev hsr_slave_1 [ 718.805740] protocol 88fb is buggy, dev hsr_slave_0 [ 718.810942] protocol 88fb is buggy, dev hsr_slave_1 [ 718.973579] lowmem_reserve[]: 0 0 0 0 [ 718.977477] Node 1 Normal free:53368kB min:53420kB low:66772kB high:80124kB active_anon:3443908kB inactive_anon:24kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18656kB pagetables:48952kB bounce:0kB free_pcp:132kB local_pcp:120kB free_cma:0kB [ 719.086463] lowmem_reserve[]: 0 0 0 0 [ 719.091031] Node 0 DMA: 2*4kB (ME) 12*8kB (UME) 6*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 719.186628] Node 0 DMA32: 222*4kB (UE) 977*8kB (UME) 729*16kB (UE) 304*32kB (UM) 3*64kB (UM) 2*128kB (UM) 1*256kB (E) 1*512kB (E) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 36432kB [ 719.323763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.350140] protocol 88fb is buggy, dev hsr_slave_0 [ 719.355244] protocol 88fb is buggy, dev hsr_slave_1 [ 719.360357] protocol 88fb is buggy, dev hsr_slave_0 [ 719.365398] protocol 88fb is buggy, dev hsr_slave_1 [ 719.430136] protocol 88fb is buggy, dev hsr_slave_0 [ 719.435266] protocol 88fb is buggy, dev hsr_slave_1 [ 719.458885] Node 1 Normal: 160*4kB (UME) 159*8kB (UME) 82*16kB (UME) 641*32kB (UE) 169*64kB (UE) 29*128kB (UM) 3*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53368kB [ 719.649314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.744671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.844249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.925693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 720.016025] 262 total pagecache pages [ 720.019874] 0 pages in swap cache [ 720.083477] Swap cache stats: add 0, delete 0, find 0/0 [ 720.088899] Free swap = 0kB [ 720.183744] Total swap = 0kB [ 720.186850] 1965979 pages RAM [ 720.189969] 0 pages HighMem/MovableOnly [ 720.290691] 333229 pages reserved [ 720.294190] 0 pages cma reserved [ 720.297570] Out of memory: Kill process 19592 (syz-executor.0) score 1007 or sacrifice child [ 720.458157] Killed process 19592 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:35:15 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:15 executing program 4: clone(0xb0200, &(0x7f0000000180)="2180749e3ec914e869d2fcade2ed8f5cd0151df6e4d11c31cd829ef20619f80c", &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000380)="4667052abedf25471e2571ed87e69cb872f1839d5a73420737afb7f1f3bbc6137bf68a695ec431dbced7bd95026bfe36a85dba7581431903af32c86a591bfa01ba16350fe6fb625f000000000000000000000000000057a28e9386ed26e2f0b8788617758a1b55bdc7df74df05517e321b8690acd31b9ffc7763b8fcb3d9f6a4fc1067625186abe64a0a874376326d856ce92190ded6b858d6f7b0d053694cad59796e64e4cbcb895d2df3924882be0239c116c645a4df2e1a89b51b07111cee3e1c4865310004e6270cfa67e89d5ec39a1753dc2c2f60224626a03b") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000480)={0x7f, 0x4, 0x800, 0x0, 0x0, [], [], [], 0x4, 0x9bc}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r2, 0x3, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) write$P9_RFLUSH(r3, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) 04:35:15 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) fcntl$addseals(r0, 0x409, 0x1) [ 721.003256] devpts: called with bogus options 04:35:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4070, 0xfe6}], 0x2, 0x0) 04:35:16 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) 04:35:16 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:16 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) [ 721.106430] devpts: called with bogus options 04:35:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000380)=""/169, 0xfffffffffffffe60}, {&(0x7f00000018c0)=""/57, 0xfffffffffffffdd5}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f0000000640)=""/54, 0x36}], 0x9, 0x0) 04:35:16 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r1 = msgget$private(0x0, 0x0) gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) getpgrp(r2) msgctl$IPC_SET(r1, 0x1, &(0x7f00000014c0)={{0x1}, 0x1000000000000000, 0x0, 0x0, 0x3}) msgsnd(r1, &(0x7f0000000000)={0x2, "6f1db3a3147e1bd75c16c205069be84fe9072884d7a037228d1c302d030148e3d3800b088178c1b2dd83158db22141d7f539d367b6f6cec1306d010dca2a74834a28513b2a"}, 0x4d, 0x800) sync_file_range(r0, 0x100, 0xe5, 0x7) 04:35:16 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) 04:35:16 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 722.179139] devpts: called with bogus options [ 722.186558] devpts: called with bogus options 04:35:17 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) 04:35:17 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:17 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\b\x1f\xb5n=\x87\x8b\x9dah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\x91Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bD!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xff\xff\x00\x00!\f\\;\x83\xd2\xfeFKd|\xb6)\a\xd3+u\xe2u\xe0q\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00') preadv(r1, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r2, 0x3, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x2, 0xf5, 0x0, 0x8}, {0x3, 0x3, 0xc1, 0x81}, {0x4, 0x28, 0x40, 0x7}]}) [ 722.532347] devpts: called with bogus options 04:35:17 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 722.555426] devpts: called with bogus options 04:35:17 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = getpgrp(0x0) waitid(0x2, r7, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r7, 0x9, &(0x7f00000001c0)=""/68) r8 = getpgid(r7) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = inotify_init1(0x0) r15 = gettid() fcntl$setown(r14, 0x8, r15) r16 = getpid() r17 = socket(0xa, 0x3, 0x8) r18 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r20 = gettid() waitid(0x83b895581628fca4, r20, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r17, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r19, @ANYRESDEC=r20]], 0xfffffffffffffe56}}, 0x20004850) r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r22 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r23 = dup2(r22, r21) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r23, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc08c5334, &(0x7f0000000200)) r24 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r24) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r24}, 0x0) kcmp(r24, r24, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r24, 0x0, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r24, r25, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r20, r23, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r12, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r6, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r1, 0x3, 0x0) 04:35:17 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009ec0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/183}]}}, {{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000002500)=[{&(0x7f0000000280)=""/142}, {&(0x7f0000000340)=""/4096}, {&(0x7f0000001340)=""/4096}, {&(0x7f0000002340)=""/158}, {&(0x7f0000002400)=""/73}, {&(0x7f0000002480)=""/65}], 0x0, &(0x7f0000002580)=""/4096}, 0x48a}, {{&(0x7f0000003580)=@alg, 0x0, &(0x7f00000069c0)=[{&(0x7f0000003600)=""/165}, {&(0x7f00000036c0)=""/91}, {&(0x7f0000003740)=""/255}, {&(0x7f0000003840)=""/4096}, {&(0x7f0000004840)=""/74}, {&(0x7f00000048c0)=""/4096}, {&(0x7f00000058c0)=""/255}, {&(0x7f00000059c0)=""/4096}], 0x0, &(0x7f0000006a40)=""/123}, 0x5}, {{&(0x7f0000006ac0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006b40)=""/182}, {&(0x7f00000000c0)=""/33}, {&(0x7f0000006c00)=""/148}, {&(0x7f0000006cc0)=""/139, 0xffffffffffffff14}, {&(0x7f0000006d80)=""/74}], 0x0, &(0x7f0000006e80)=""/189}, 0x2}, {{&(0x7f0000006f40)=@xdp, 0x0, &(0x7f0000007180)=[{&(0x7f0000006fc0)=""/160}, {&(0x7f0000007080)}, {&(0x7f00000070c0)=""/185}], 0x0, &(0x7f00000071c0)=""/87}, 0x5}, {{&(0x7f0000007240)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000007640)=[{&(0x7f00000072c0)=""/60}, {&(0x7f0000007300)=""/229}, {&(0x7f0000007400)=""/36}, {&(0x7f0000007440)=""/54}, {&(0x7f0000007480)=""/173}, {&(0x7f0000007540)=""/237}], 0x0, &(0x7f00000076c0)=""/99}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f0000007740)=""/10}, {&(0x7f0000007780)=""/4096}, {&(0x7f0000008780)=""/41}, {&(0x7f00000087c0)=""/128}, {&(0x7f0000008840)=""/18}, {&(0x7f0000008880)=""/210}, {&(0x7f0000008980)=""/124}]}, 0x9}, {{&(0x7f0000008a80)=@ethernet, 0x0, &(0x7f0000009dc0)=[{&(0x7f0000008b00)=""/250}, {&(0x7f0000008c00)=""/37}, {&(0x7f0000008c40)=""/4096}, {&(0x7f0000009c40)=""/125}, {&(0x7f0000009cc0)=""/76}, {&(0x7f0000009d40)=""/118}], 0x0, &(0x7f0000009e40)=""/119}, 0x40}], 0x284, 0x40000100, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) [ 722.799350] devpts: called with bogus options 04:35:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dspn(&(0x7f0000000000), 0x200000002974ddcd, 0x200) accept(r0, &(0x7f0000000180)=@generic, &(0x7f0000000100)=0x80) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x140100) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/4096) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) [ 722.938332] devpts: called with bogus options 04:35:19 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 725.030123] net_ratelimit: 26 callbacks suppressed [ 725.030128] protocol 88fb is buggy, dev hsr_slave_0 [ 725.041210] protocol 88fb is buggy, dev hsr_slave_1 [ 725.046706] protocol 88fb is buggy, dev hsr_slave_0 [ 725.052490] protocol 88fb is buggy, dev hsr_slave_1 04:35:19 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:20 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000200)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x3, 0x1000}, {0x4, 0x23de, 0x1000}, {0x0, 0x4}], 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101000, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x5, 0xa79}, 0xc) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0xfffffffffffffffc) 04:35:20 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) membarrier(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') prctl$PR_GET_SECUREBITS(0x1b) lseek(r4, 0x3, 0x0) 04:35:20 executing program 1: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2c3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r0, 0x3, 0x0) delete_module(&(0x7f0000000240)='\x00', 0xa00) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x1cd, 0xb00) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) preadv(r1, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000001c0)={0x8000000, 0x7fffffff, 0x7}) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000140)={@initdev}, &(0x7f0000000180)=0x8) [ 725.172327] devpts: called with bogus options [ 725.228773] devpts: called with bogus options 04:35:20 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc58a2c5cded2f440}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r0, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8001, 0x7fff, 0x3, 0xff, 0x19, 0x81, 0x1f, 0x7, 0x7a, 0x1, 0xffff, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000480)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000004c0)={0x0, 0x0, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x17, 0x0, &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000580)={0x0, r7, 0x9695, 0x8, 0x4, 0x1000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000500)={r3, r4, 0x401}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x17, 0x0, &(0x7f0000000300)) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f00000005c0)) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r9, 0x3, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vfio/vfio\x00', 0x100002, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x9f, 0x4}}, 0x20) pipe(&(0x7f0000000540)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r12, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e34, 0x1, @mcast2, 0x2}, r11}}, 0x38) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0) [ 725.370169] sctp: [Deprecated]: syz-executor.4 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.370169] Use struct sctp_sack_info instead [ 725.463325] sctp: [Deprecated]: syz-executor.4 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.463325] Use struct sctp_sack_info instead [ 725.590130] protocol 88fb is buggy, dev hsr_slave_0 [ 725.596074] protocol 88fb is buggy, dev hsr_slave_1 [ 725.602318] protocol 88fb is buggy, dev hsr_slave_0 [ 725.607432] protocol 88fb is buggy, dev hsr_slave_1 [ 725.670160] protocol 88fb is buggy, dev hsr_slave_0 [ 725.675409] protocol 88fb is buggy, dev hsr_slave_1 [ 725.830862] Unknown ioctl -1072667637 04:35:20 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000380)=""/4096) r3 = syz_open_procfs(r0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) setns(r4, 0x48000000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) write$P9_RREAD(r5, &(0x7f0000001380)={0x20, 0x75, 0x2, {0x15, "beb0cc3d001d78e78a1f1bc7bc6961016193a58103"}}, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$inet_tcp_int(r7, 0x6, 0x17, 0x0, &(0x7f0000000300)=0x32f) fsetxattr$security_smack_entry(r6, &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x19, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r8, 0x3, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f0000000180)=0x6) preadv(r3, &(0x7f0000000240), 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x190002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x81, 0x8, 0x4, 'queue1\x00', 0x8001}) 04:35:20 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 725.993828] devpts: called with bogus options 04:35:21 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 726.072378] sctp: [Deprecated]: syz-executor.4 (pid 23129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.072378] Use struct sctp_sack_info instead [ 726.107386] sctp: [Deprecated]: syz-executor.4 (pid 23135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.107386] Use struct sctp_sack_info instead 04:35:21 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) 04:35:21 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:21 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/153, 0x99}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/83, 0x53}], 0x1, 0x4) [ 726.420539] devpts: called with bogus options [ 726.442839] devpts: called with bogus options [ 727.072135] Unknown ioctl -1072667637 [ 727.203951] syz-executor.5 (23118) used greatest stack depth: 23168 bytes left [ 727.638308] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 727.659551] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 727.686647] CPU: 1 PID: 23143 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 727.693705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.703178] Call Trace: [ 727.705780] dump_stack+0x138/0x197 [ 727.709507] dump_header+0x177/0x6cd [ 727.713499] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 727.718622] ? ___ratelimit+0x55/0x537 [ 727.722783] oom_kill_process.cold+0x10/0xadd [ 727.727297] ? oom_unkillable_task+0x294/0x390 [ 727.732424] ? lock_downgrade+0x740/0x740 [ 727.736908] out_of_memory+0x2ee/0x1180 [ 727.740897] ? lock_acquire+0x16f/0x430 [ 727.744886] ? oom_killer_disable+0x1d0/0x1d0 [ 727.749394] ? __alloc_pages_slowpath+0xca4/0x2930 [ 727.754463] __alloc_pages_slowpath+0x2251/0x2930 [ 727.760674] ? __alloc_pages_nodemask+0x639/0x7a0 [ 727.768257] ? warn_alloc+0xf0/0xf0 [ 727.771923] ? __might_sleep+0x93/0xb0 [ 727.775928] __alloc_pages_nodemask+0x62c/0x7a0 [ 727.780630] ? __alloc_pages_slowpath+0x2930/0x2930 [ 727.785667] ? lock_downgrade+0x740/0x740 [ 727.789839] ? find_get_entry+0x23c/0x520 [ 727.794005] alloc_pages_current+0xec/0x1e0 [ 727.798372] __page_cache_alloc+0x248/0x3e0 [ 727.803750] filemap_fault+0xcc9/0x19a0 [ 727.807865] ? __lock_page_or_retry+0x8d0/0x8d0 [ 727.812629] ? lock_acquire+0x16f/0x430 [ 727.816641] ? ext4_filemap_fault+0x7b/0xb0 [ 727.821168] ext4_filemap_fault+0x83/0xb0 [ 727.825593] __do_fault+0x104/0x390 [ 727.829244] __handle_mm_fault+0x2460/0x3470 [ 727.833838] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 727.839218] ? find_held_lock+0x35/0x130 [ 727.843459] ? handle_mm_fault+0x1b6/0x7c0 [ 727.847966] ? sync_mm_rss+0x11d/0x190 [ 727.852096] handle_mm_fault+0x293/0x7c0 [ 727.856184] __do_page_fault+0x4c1/0xb80 [ 727.860356] ? vmalloc_fault+0xe30/0xe30 [ 727.864512] ? page_fault+0x2f/0x50 [ 727.868152] do_page_fault+0x71/0x511 [ 727.871993] ? page_fault+0x2f/0x50 [ 727.875765] page_fault+0x45/0x50 [ 727.879220] RIP: 0033:0x40cc17 [ 727.882590] RSP: 002b:00007ffc79d31320 EFLAGS: 00010283 [ 727.888396] RAX: 0000000000000000 RBX: 000000000075c9a0 RCX: 0000001b2d820000 [ 727.896409] RDX: 0000001b2c820000 RSI: 0000000000000001 RDI: ffffffff6e783fbb [ 727.904015] RBP: 00000000007645b0 R08: 000000006e783fbb R09: 000000006e783fbf [ 727.912063] R10: 00007ffc79d313f0 R11: 0000000000000246 R12: 000000000075bfc8 [ 727.919651] R13: 00000000000b1792 R14: 00000000000b17bf R15: 000000000075bfd4 [ 727.932233] Mem-Info: [ 727.936724] active_anon:1349666 inactive_anon:182 isolated_anon:0 [ 727.936724] active_file:20 inactive_file:10 isolated_file:0 [ 727.936724] unevictable:0 dirty:0 writeback:0 unstable:0 [ 727.936724] slab_reclaimable:16403 slab_unreclaimable:108135 [ 727.936724] mapped:52245 shmem:242 pagetables:23719 bounce:0 [ 727.936724] free:24915 free_pcp:54 free_cma:0 [ 727.980953] Node 0 active_anon:1961312kB inactive_anon:712kB active_file:64kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208944kB dirty:0kB writeback:0kB shmem:948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 728.013495] Node 1 active_anon:3437352kB inactive_anon:16kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 728.042274] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.075576] lowmem_reserve[]: 0 2580 2580 2580 [ 728.080417] Node 0 DMA32 free:36460kB min:36468kB low:45584kB high:54700kB active_anon:1959048kB inactive_anon:712kB active_file:32kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.112060] lowmem_reserve[]: 0 0 0 0 [ 728.116172] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.156638] lowmem_reserve[]: 0 0 0 0 [ 728.165249] Node 1 Normal free:53096kB min:53420kB low:66772kB high:80124kB active_anon:3437448kB inactive_anon:16kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18784kB pagetables:49024kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.215340] lowmem_reserve[]: 0 0 0 0 [ 728.219368] Node 0 DMA: 2*4kB (ME) 12*8kB (UME) 6*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 728.247547] Node 0 DMA32: 110*4kB (UME) 1190*8kB (UME) 881*16kB (UME) 308*32kB (UM) 2*64kB (U) 1*128kB (U) 1*256kB (E) 2*512kB (ME) 1*1024kB (M) 0*2048kB 0*4096kB = 36472kB [ 728.273545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.290561] Node 1 Normal: 170*4kB (UME) 114*8kB (UME) 89*16kB (UME) 505*32kB (UME) 202*64kB (UME) 42*128kB (UM) 5*256kB (M) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 2*4096kB (M) = 53096kB [ 728.313818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.326857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.346129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.358882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.371685] 277 total pagecache pages [ 728.375512] 0 pages in swap cache [ 728.378958] Swap cache stats: add 0, delete 0, find 0/0 [ 728.392212] Free swap = 0kB [ 728.395263] Total swap = 0kB [ 728.398289] 1965979 pages RAM [ 728.409078] 0 pages HighMem/MovableOnly [ 728.417014] 333229 pages reserved [ 728.428582] 0 pages cma reserved [ 728.435954] Out of memory: Kill process 19780 (syz-executor.0) score 1007 or sacrifice child [ 728.456256] Killed process 19780 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB 04:35:21 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x400000, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'bond_slave_0\x00', 0x100}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="7bf1a39fc3bc9c327b7ea0a40a1cf0c9", 0x10) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x80, 0x6fafa57ac86ff56e) preadv(r2, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x100000cd, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r3, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0x1e50004, 0x7, 0x1, [], &(0x7f0000000100)={0x9909e4, 0x3, [], @p_u16=&(0x7f00000000c0)=0x4}}) 04:35:25 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:25 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/rt_acct\x00') lseek(r5, 0x3, 0x0) 04:35:25 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:25 executing program 5: 04:35:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') lseek(r0, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000380)="970d61f45b2145f7f8fa89db5761ccdbef3f19e0db8e44dbc5fdd489a37a014de47611918842a5fce03c6464721da1ceda8c3a2cc3bf0b95e4c8f72456f1aa5c3e804b627e0fc0869bd6c35c7235576a62683eb2a5db9b4378b7f0175b0f42e0143b5ddcec52612789b7212a5b3ea8dfef190afc09694d27c0dd6caa01c8079f6a2bb3e51e5dfd130a17e1ab1d8051faa79d939306d55c4897f6a548728446a54f18efbb5b48bd3ea4ea171646c2c288f55092e2ea2bd1af9cb13857bdb57af8a93778f3c5d4255371fdb98848598640fb5a73c3c951ef446acf2664b66e16f0ca1972749d9cb5a9b1ae3f9c22660f8b7b8b782401131ff62e1631a8", 0xfc, 0x40000, &(0x7f0000000100)={0xa, 0x4e20, 0x1d, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) 04:35:25 executing program 5: [ 730.796801] devpts: called with bogus options [ 730.804278] devpts: called with bogus options 04:35:25 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r0, 0x3, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xc, {0x4, 0xc4, 0x3, 0x7}}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) 04:35:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/243) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000380)=""/135, &(0x7f0000000100)=0x87) 04:35:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1f}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) close(r0) [ 731.270128] net_ratelimit: 26 callbacks suppressed [ 731.270134] protocol 88fb is buggy, dev hsr_slave_0 [ 731.280343] protocol 88fb is buggy, dev hsr_slave_1 [ 731.285490] protocol 88fb is buggy, dev hsr_slave_0 [ 731.290629] protocol 88fb is buggy, dev hsr_slave_1 [ 731.830122] protocol 88fb is buggy, dev hsr_slave_0 [ 731.835275] protocol 88fb is buggy, dev hsr_slave_1 [ 731.840479] protocol 88fb is buggy, dev hsr_slave_0 [ 731.845543] protocol 88fb is buggy, dev hsr_slave_1 [ 732.080221] protocol 88fb is buggy, dev hsr_slave_0 [ 732.085453] protocol 88fb is buggy, dev hsr_slave_1 [ 732.525547] IPVS: length: 135 != 8 [ 737.510150] net_ratelimit: 26 callbacks suppressed [ 737.510156] protocol 88fb is buggy, dev hsr_slave_0 [ 737.520340] protocol 88fb is buggy, dev hsr_slave_1 [ 737.525445] protocol 88fb is buggy, dev hsr_slave_0 [ 737.530638] protocol 88fb is buggy, dev hsr_slave_1 [ 738.070224] protocol 88fb is buggy, dev hsr_slave_0 [ 738.075948] protocol 88fb is buggy, dev hsr_slave_1 [ 738.082378] protocol 88fb is buggy, dev hsr_slave_0 [ 738.087646] protocol 88fb is buggy, dev hsr_slave_1 [ 738.310216] protocol 88fb is buggy, dev hsr_slave_0 [ 738.315874] protocol 88fb is buggy, dev hsr_slave_1 04:35:35 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) 04:35:37 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000017c0)=""/4085, 0xc959646558c3a1da}], 0x2, 0x0) [ 743.750140] net_ratelimit: 26 callbacks suppressed [ 743.750146] protocol 88fb is buggy, dev hsr_slave_0 [ 743.760622] protocol 88fb is buggy, dev hsr_slave_1 [ 743.765760] protocol 88fb is buggy, dev hsr_slave_0 [ 743.770991] protocol 88fb is buggy, dev hsr_slave_1 04:35:37 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x3c) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) [ 744.310224] protocol 88fb is buggy, dev hsr_slave_0 [ 744.315454] protocol 88fb is buggy, dev hsr_slave_1 [ 744.321646] protocol 88fb is buggy, dev hsr_slave_0 [ 744.327161] protocol 88fb is buggy, dev hsr_slave_1 [ 744.550168] protocol 88fb is buggy, dev hsr_slave_0 [ 744.555404] protocol 88fb is buggy, dev hsr_slave_1 04:35:43 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 749.990103] net_ratelimit: 26 callbacks suppressed [ 749.990108] protocol 88fb is buggy, dev hsr_slave_0 [ 750.000426] protocol 88fb is buggy, dev hsr_slave_1 [ 750.005549] protocol 88fb is buggy, dev hsr_slave_0 [ 750.010673] protocol 88fb is buggy, dev hsr_slave_1 [ 750.550141] protocol 88fb is buggy, dev hsr_slave_0 [ 750.555317] protocol 88fb is buggy, dev hsr_slave_1 [ 750.560751] protocol 88fb is buggy, dev hsr_slave_0 [ 750.565879] protocol 88fb is buggy, dev hsr_slave_1 [ 750.790174] protocol 88fb is buggy, dev hsr_slave_0 [ 750.795504] protocol 88fb is buggy, dev hsr_slave_1 04:35:46 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:48 executing program 5: r0 = socket(0x8000000000000010, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001300)={r2, 0x3, 0x6, @dev}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket(0x8000000000000010, 0x802, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001300)={r8, 0x3, 0x6, @dev}, 0x10) dup2(r0, r7) 04:35:50 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r3, 0x3, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x2c, 0x18, 0xc, 0xf, 0x7, 0x400, 0x3, 0x15a, 0x7ffffffffffffffe}}) [ 756.230131] net_ratelimit: 26 callbacks suppressed [ 756.230136] protocol 88fb is buggy, dev hsr_slave_0 [ 756.240342] protocol 88fb is buggy, dev hsr_slave_1 [ 756.245964] protocol 88fb is buggy, dev hsr_slave_0 [ 756.251086] protocol 88fb is buggy, dev hsr_slave_1 [ 756.790174] protocol 88fb is buggy, dev hsr_slave_0 [ 756.795742] protocol 88fb is buggy, dev hsr_slave_1 [ 756.801687] protocol 88fb is buggy, dev hsr_slave_0 [ 756.806850] protocol 88fb is buggy, dev hsr_slave_1 [ 757.030182] protocol 88fb is buggy, dev hsr_slave_0 [ 757.037256] protocol 88fb is buggy, dev hsr_slave_1 [ 758.125809] devpts: called with bogus options [ 758.137120] device syz_tun entered promiscuous mode [ 758.191517] device syz_tun left promiscuous mode [ 758.231822] device syz_tun entered promiscuous mode [ 758.270542] device syz_tun left promiscuous mode [ 759.582310] devpts: called with bogus options [ 761.358733] blkid invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 761.371743] blkid cpuset=/ mems_allowed=0-1 [ 761.376177] CPU: 0 PID: 23238 Comm: blkid Not tainted 4.14.151 #0 [ 761.382404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.391757] Call Trace: [ 761.394351] dump_stack+0x138/0x197 [ 761.398130] dump_header+0x177/0x6cd [ 761.401847] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 761.407061] ? ___ratelimit+0x55/0x537 [ 761.410957] oom_kill_process.cold+0x10/0xadd [ 761.415453] ? oom_unkillable_task+0x294/0x390 [ 761.420060] ? lock_downgrade+0x740/0x740 [ 761.426566] out_of_memory+0x2ee/0x1180 [ 761.430557] ? lock_acquire+0x16f/0x430 [ 761.434544] ? oom_killer_disable+0x1d0/0x1d0 [ 761.439136] ? __alloc_pages_slowpath+0xca4/0x2930 [ 761.444155] __alloc_pages_slowpath+0x2251/0x2930 [ 761.449094] ? __alloc_pages_nodemask+0x639/0x7a0 [ 761.453938] ? warn_alloc+0xf0/0xf0 [ 761.457768] ? __might_sleep+0x93/0xb0 [ 761.461655] __alloc_pages_nodemask+0x62c/0x7a0 [ 761.466325] ? __alloc_pages_slowpath+0x2930/0x2930 [ 761.471345] ? lock_downgrade+0x740/0x740 [ 761.475493] ? find_get_entry+0x23c/0x520 [ 761.479835] alloc_pages_current+0xec/0x1e0 [ 761.484854] __page_cache_alloc+0x248/0x3e0 [ 761.489177] filemap_fault+0xcc9/0x19a0 [ 761.493158] ? __lock_page_or_retry+0x8d0/0x8d0 [ 761.498139] ? lock_acquire+0x16f/0x430 [ 761.502144] ? ext4_filemap_fault+0x7b/0xb0 [ 761.506498] ext4_filemap_fault+0x83/0xb0 [ 761.511173] __do_fault+0x104/0x390 [ 761.514798] __handle_mm_fault+0x2460/0x3470 [ 761.519206] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 761.523962] ? find_held_lock+0x35/0x130 [ 761.528030] ? handle_mm_fault+0x1b6/0x7c0 [ 761.532536] handle_mm_fault+0x293/0x7c0 [ 761.536596] __do_page_fault+0x4c1/0xb80 [ 761.540662] ? vmalloc_fault+0xe30/0xe30 [ 761.544730] ? page_fault+0x2f/0x50 [ 761.548380] do_page_fault+0x71/0x511 [ 761.552174] ? page_fault+0x2f/0x50 [ 761.555798] page_fault+0x45/0x50 [ 761.559244] RIP: 0033:0x7f638c096fcc [ 761.563148] RSP: 002b:00007ffcf75fb440 EFLAGS: 00010202 [ 761.568515] RAX: 0000000000000000 RBX: 00007f638c2b687c RCX: 0000000000000023 [ 761.575799] RDX: 000000000000000b RSI: 00007ffcf75fbbe8 RDI: 00007f638c0aba23 [ 761.583409] RBP: 00007ffcf75fbf2c R08: 0000000000000008 R09: 0101010101010101 [ 761.590679] R10: 0000000000000000 R11: 00007f638bd39060 R12: 0000000000403738 [ 761.598031] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000005 [ 761.653659] Mem-Info: [ 761.656154] active_anon:1350447 inactive_anon:180 isolated_anon:0 [ 761.656154] active_file:26 inactive_file:3 isolated_file:0 [ 761.656154] unevictable:0 dirty:0 writeback:0 unstable:0 [ 761.656154] slab_reclaimable:16647 slab_unreclaimable:107034 [ 761.656154] mapped:52256 shmem:242 pagetables:23778 bounce:0 [ 761.656154] free:25043 free_pcp:1 free_cma:0 [ 761.872062] Node 0 active_anon:1963564kB inactive_anon:712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208988kB dirty:0kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 762.072243] Node 1 active_anon:3438224kB inactive_anon:8kB active_file:60kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.100397] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:2420kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.128592] lowmem_reserve[]: 0 2580 2580 2580 [ 762.133564] Node 0 DMA32 free:36512kB min:36468kB low:45584kB high:54700kB active_anon:1961216kB inactive_anon:712kB active_file:4kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45744kB bounce:0kB free_pcp:48kB local_pcp:36kB free_cma:0kB [ 762.163169] lowmem_reserve[]: 0 0 0 0 [ 762.167040] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.211505] lowmem_reserve[]: 0 0 0 0 [ 762.215376] Node 1 Normal free:52904kB min:53420kB low:66772kB high:80124kB active_anon:3438224kB inactive_anon:8kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18688kB pagetables:49356kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 762.268816] lowmem_reserve[]: 0 0 0 0 [ 762.278580] Node 0 DMA: 2*4kB (ME) 9*8kB (UME) 7*16kB (U) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 762.295209] Node 0 DMA32: 93*4kB (E) 1312*8kB (UME) 905*16kB (UME) 308*32kB (U) 3*64kB (UM) 2*128kB (UM) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36420kB [ 762.316667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 762.328012] Node 1 Normal: 36*4kB (ME) 70*8kB (UM) 166*16kB (UE) 414*32kB (UME) 175*64kB (UME) 51*128kB (UM) 11*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 53536kB [ 762.350508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.359643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.374258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.461915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.480157] net_ratelimit: 26 callbacks suppressed [ 762.480164] protocol 88fb is buggy, dev hsr_slave_0 [ 762.490288] protocol 88fb is buggy, dev hsr_slave_1 [ 762.495430] protocol 88fb is buggy, dev hsr_slave_0 [ 762.500524] protocol 88fb is buggy, dev hsr_slave_1 [ 762.514468] 281 total pagecache pages [ 762.518323] 0 pages in swap cache [ 762.562120] Swap cache stats: add 0, delete 0, find 0/0 [ 762.567527] Free swap = 0kB [ 762.615921] Total swap = 0kB [ 762.618991] 1965979 pages RAM [ 762.657464] 0 pages HighMem/MovableOnly [ 762.683754] 333229 pages reserved [ 762.687244] 0 pages cma reserved [ 762.737116] Out of memory: Kill process 19851 (syz-executor.0) score 1007 or sacrifice child [ 762.775605] Killed process 19851 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 763.030117] protocol 88fb is buggy, dev hsr_slave_0 [ 763.035559] protocol 88fb is buggy, dev hsr_slave_1 [ 763.040895] protocol 88fb is buggy, dev hsr_slave_0 [ 763.046275] protocol 88fb is buggy, dev hsr_slave_1 [ 763.270197] protocol 88fb is buggy, dev hsr_slave_0 [ 763.275329] protocol 88fb is buggy, dev hsr_slave_1 04:35:59 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100), 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 04:35:59 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:35:59 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x3, 0x10, 0x7, 0x1f7}, &(0x7f0000000100)=0x3065250c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffffffff}}, 0x10) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:36:00 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1f) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00vO', @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e24, 0xff, @mcast1, 0x2}}}, 0x84) [ 765.195409] devpts: called with bogus options 04:36:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140), 0x0, 0x0) [ 765.251003] devpts: called with bogus options 04:36:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 765.297727] devpts: called with bogus options 04:36:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x2, 0x0, 0x20000000, 0x0, 0xfffffffffffffffc, 0xe131, 0x400}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) 04:36:00 executing program 5: socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7e0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1b4, 0x80000000}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 765.378766] devpts: called with bogus options 04:36:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 765.760548] sctp: [Deprecated]: syz-executor.1 (pid 23278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.760548] Use struct sctp_sack_info instead [ 765.794507] devpts: called with bogus options [ 766.181614] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 766.195371] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 766.201987] CPU: 0 PID: 6916 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 766.208747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.218117] Call Trace: [ 766.220756] dump_stack+0x138/0x197 [ 766.224409] dump_header+0x177/0x6cd [ 766.228160] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 766.233376] ? ___ratelimit+0x55/0x537 [ 766.237292] oom_kill_process.cold+0x10/0xadd [ 766.241802] ? rcu_read_unlock_special+0x639/0xd40 [ 766.246816] ? lock_downgrade+0x740/0x740 [ 766.250970] out_of_memory+0x2ee/0x1180 [ 766.254930] ? lock_acquire+0x16f/0x430 [ 766.258897] ? oom_killer_disable+0x1d0/0x1d0 [ 766.263411] ? __alloc_pages_slowpath+0xca4/0x2930 [ 766.268365] __alloc_pages_slowpath+0x2251/0x2930 [ 766.273236] ? warn_alloc+0xf0/0xf0 [ 766.276893] ? __might_sleep+0x93/0xb0 [ 766.281292] __alloc_pages_nodemask+0x62c/0x7a0 [ 766.285971] ? __alloc_pages_slowpath+0x2930/0x2930 [ 766.290996] ? lock_downgrade+0x740/0x740 [ 766.295135] ? find_get_entry+0x23c/0x520 [ 766.299274] alloc_pages_current+0xec/0x1e0 [ 766.303596] __page_cache_alloc+0x248/0x3e0 [ 766.307908] filemap_fault+0xcc9/0x19a0 [ 766.311998] ? __lock_page_or_retry+0x8d0/0x8d0 [ 766.316694] ? lock_acquire+0x16f/0x430 [ 766.320680] ? ext4_filemap_fault+0x7b/0xb0 [ 766.324997] ext4_filemap_fault+0x83/0xb0 [ 766.329168] __do_fault+0x104/0x390 [ 766.333215] __handle_mm_fault+0x2460/0x3470 [ 766.337708] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 766.342451] ? find_held_lock+0x35/0x130 [ 766.346591] ? handle_mm_fault+0x1b6/0x7c0 [ 766.350919] handle_mm_fault+0x293/0x7c0 [ 766.354970] __do_page_fault+0x4c1/0xb80 [ 766.359022] ? pci_mmcfg_check_reserved+0x150/0x150 [ 766.364038] ? vmalloc_fault+0xe30/0xe30 [ 766.368431] ? page_fault+0x2f/0x50 [ 766.372483] do_page_fault+0x71/0x511 [ 766.376269] ? page_fault+0x2f/0x50 [ 766.379888] page_fault+0x45/0x50 [ 766.383327] RIP: 0033:0x72dce5 [ 766.386515] RSP: 002b:000000c4318c4ad0 EFLAGS: 00010246 [ 766.391878] RAX: 000000000154cbe0 RBX: 000000000000000a RCX: 000000000154cbe0 [ 766.399135] RDX: 000000c42dd59f40 RSI: 0000000000000000 RDI: 000000c428df2b00 [ 766.406391] RBP: 000000c4318c4bd0 R08: 0000000000000000 R09: 0000000000000000 [ 766.413661] R10: 00000000009b3262 R11: 0000000000000004 R12: 0000000000000000 [ 766.420932] R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000100 [ 766.505240] Mem-Info: [ 766.508314] active_anon:1352899 inactive_anon:182 isolated_anon:0 [ 766.508314] active_file:210 inactive_file:208 isolated_file:32 [ 766.508314] unevictable:0 dirty:2 writeback:0 unstable:0 [ 766.508314] slab_reclaimable:16554 slab_unreclaimable:107127 [ 766.508314] mapped:52588 shmem:242 pagetables:23864 bounce:0 [ 766.508314] free:21862 free_pcp:19 free_cma:0 [ 766.552138] Node 0 active_anon:1971548kB inactive_anon:712kB active_file:300kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209344kB dirty:0kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 766.591857] Node 1 active_anon:3440048kB inactive_anon:16kB active_file:148kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:608kB dirty:8kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 766.769457] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:2448kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.842085] lowmem_reserve[]: 0 2580 2580 2580 [ 766.847401] Node 0 DMA32 free:36212kB min:36468kB low:45584kB high:54700kB active_anon:1960000kB inactive_anon:712kB active_file:400kB inactive_file:344kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45884kB bounce:0kB free_pcp:684kB local_pcp:680kB free_cma:0kB [ 766.881106] lowmem_reserve[]: 0 0 0 0 [ 766.885668] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.921225] lowmem_reserve[]: 0 0 0 0 [ 766.926175] Node 1 Normal free:56164kB min:53420kB low:66772kB high:80124kB active_anon:3432892kB inactive_anon:16kB active_file:540kB inactive_file:1408kB unevictable:0kB writepending:8kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:19008kB pagetables:49560kB bounce:0kB free_pcp:652kB local_pcp:164kB free_cma:0kB [ 766.974523] lowmem_reserve[]: 0 0 0 0 [ 767.019091] Node 0 DMA: 4*4kB (UME) 6*8kB (UE) 8*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 767.035136] Node 0 DMA32: 129*4kB (UME) 1224*8kB (UME) 912*16kB (UME) 319*32kB (UM) 3*64kB (M) 2*128kB (M) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36324kB [ 767.050682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 767.061990] Node 1 Normal: 128*4kB (UME) 141*8kB (UME) 101*16kB (UME) 425*32kB (UME) 175*64kB (UME) 56*128kB (UM) 7*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 53400kB [ 767.079912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.092738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.101694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.113690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.125667] 1181 total pagecache pages [ 767.147239] 0 pages in swap cache [ 767.153163] Swap cache stats: add 0, delete 0, find 0/0 [ 767.165613] Free swap = 0kB [ 767.172609] Total swap = 0kB [ 767.180425] 1965979 pages RAM [ 767.187549] 0 pages HighMem/MovableOnly [ 767.192361] 333229 pages reserved [ 767.196223] 0 pages cma reserved [ 767.200146] Out of memory: Kill process 19901 (syz-executor.0) score 1007 or sacrifice child [ 767.209200] Killed process 19901 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 767.399360] oom_reaper: reaped process 19901 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:36:03 executing program 5: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x7, 0x0, 0x0, 0x100032, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0]) exit(0x6) [ 768.304515] sctp: [Deprecated]: syz-executor.1 (pid 23284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.304515] Use struct sctp_sack_info instead 04:36:03 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:03 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 768.710151] net_ratelimit: 26 callbacks suppressed [ 768.710157] protocol 88fb is buggy, dev hsr_slave_0 [ 768.721111] protocol 88fb is buggy, dev hsr_slave_1 [ 768.728931] protocol 88fb is buggy, dev hsr_slave_0 [ 768.734342] protocol 88fb is buggy, dev hsr_slave_1 [ 768.854987] devpts: called with bogus options [ 768.868716] devpts: called with bogus options 04:36:03 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x80000000, 0xcd1}, {0x10000, 0x62e}]}, 0x14, 0x3) 04:36:04 executing program 1: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000200)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/16) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000300)) fcntl$getown(r3, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000380)='ne\x8b/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\xe8\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) [ 769.270149] protocol 88fb is buggy, dev hsr_slave_0 [ 769.276239] protocol 88fb is buggy, dev hsr_slave_1 [ 769.281893] protocol 88fb is buggy, dev hsr_slave_0 [ 769.287687] protocol 88fb is buggy, dev hsr_slave_1 [ 769.391165] EXT4-fs (sda1): re-mounted. Opts: [ 769.510252] protocol 88fb is buggy, dev hsr_slave_0 [ 769.517829] protocol 88fb is buggy, dev hsr_slave_1 04:36:05 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00\xc2(t\xf56c\xf71E\x9e\x90\xac\xa4\x19\x7f\xa1\xb8\x02x9\xff0\x7f\x94\xa7\xbeX\xd2\xed\x0e^>@\xaf\x11c\xce19\xf5\xf8\xd3\x19k\x1d\xa5\x99\x89\xb4=\x1b\xde\x88g\xf4\xadi\xef\xbe\x13\xaaU\xdc\xdcw\r\xe1 jy8\n%\xde\x86\xb8ExAkCBp\x18/\x80W.[\r\x13\xc0e\x8f9i\xc5\x95\xca\xd1\xba&?\xe65}\xe9\nl\xb4b\xa7\x9dH\"\xf3\xaa>4\xe9A$\xf9\x04\xeb\xd5\x00\xb7,\x80\x1a\xaf\xbeP\f\xec\xa8\xc1l\xbb\xe9\xc2\x01\xe7\xf4mD\x80m\xc2\xbd|\x06\b\xd2\xc9\xdb\xcb\x83\xb2\xda\xa7\xc5\xf1J\xd2\xf7i\x95\xb7\xc0\xf4nEU.\x0e\x9b\xb6\x87\x13\xd5\xa8\x7f\x16\xc3\xac\x9d,\xa24>9\xa46\x8c\x7f\x00\x00\x00\x00\x00\x00\x00\x04\xf6\x8f\x0e|\xa0|\x8aw\x87\x9f\xec\xebQ\xa2\xf4[3\xdeF\xce\xf2\xb4\xf9H@\xce8\xe4\xf8\xd3\xf0', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) 04:36:05 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:05 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:05 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) 04:36:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/186, 0x1a, 0xba, 0x1}, 0x20) [ 770.845975] devpts: called with bogus options [ 770.885250] devpts: called with bogus options 04:36:05 executing program 5: open(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) r1 = getpid() tgkill(r1, r0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffff3d) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) clock_gettime(0x0, 0x0) tkill(r0, 0x1000000000016) 04:36:06 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x14800, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000002000)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r3, 0x3, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f00000017c0)) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) [ 773.193713] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 773.211368] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 773.234591] CPU: 0 PID: 6917 Comm: syz-fuzzer Not tainted 4.14.151 #0 [ 773.242831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.255237] Call Trace: [ 773.259366] dump_stack+0x138/0x197 [ 773.266252] dump_header+0x177/0x6cd [ 773.270949] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 773.276901] ? ___ratelimit+0x55/0x537 [ 773.281344] oom_kill_process.cold+0x10/0xadd [ 773.285856] ? rcu_read_unlock_special+0x895/0xd40 [ 773.291492] ? lock_downgrade+0x740/0x740 [ 773.295885] out_of_memory+0x2ee/0x1180 [ 773.303379] ? lock_acquire+0x16f/0x430 [ 773.307964] ? oom_killer_disable+0x1d0/0x1d0 [ 773.312556] ? __alloc_pages_slowpath+0xca4/0x2930 [ 773.317650] __alloc_pages_slowpath+0x2251/0x2930 [ 773.336266] ? __alloc_pages_nodemask+0x639/0x7a0 [ 773.342417] ? warn_alloc+0xf0/0xf0 [ 773.346288] ? __might_sleep+0x93/0xb0 [ 773.350662] __alloc_pages_nodemask+0x62c/0x7a0 [ 773.356024] ? __alloc_pages_slowpath+0x2930/0x2930 [ 773.362235] ? lock_downgrade+0x740/0x740 [ 773.367016] ? find_get_entry+0x23c/0x520 [ 773.372131] alloc_pages_current+0xec/0x1e0 [ 773.377033] __page_cache_alloc+0x248/0x3e0 [ 773.381542] filemap_fault+0xcc9/0x19a0 [ 773.385666] ? __lock_page_or_retry+0x8d0/0x8d0 [ 773.390385] ? lock_acquire+0x16f/0x430 [ 773.395729] ? ext4_filemap_fault+0x7b/0xb0 [ 773.400313] ext4_filemap_fault+0x83/0xb0 [ 773.404930] __do_fault+0x104/0x390 [ 773.408850] __handle_mm_fault+0x2460/0x3470 [ 773.414115] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 773.421269] ? find_held_lock+0x35/0x130 [ 773.426264] ? handle_mm_fault+0x1b6/0x7c0 [ 773.431114] handle_mm_fault+0x293/0x7c0 [ 773.436186] __do_page_fault+0x4c1/0xb80 [ 773.440454] ? pci_mmcfg_check_reserved+0x150/0x150 [ 773.445483] ? vmalloc_fault+0xe30/0xe30 [ 773.450108] ? page_fault+0x2f/0x50 [ 773.453911] do_page_fault+0x71/0x511 [ 773.457702] ? page_fault+0x2f/0x50 [ 773.461327] page_fault+0x45/0x50 [ 773.464771] RIP: 0033:0x457110 [ 773.469090] RSP: 002b:000000c4203bfd80 EFLAGS: 00010202 [ 773.474445] RAX: 000000c420000f38 RBX: 000000c42038a800 RCX: 0000000000000000 [ 773.482306] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000c420000f30 [ 773.489764] RBP: 000000c4203bfda0 R08: 000000c420001800 R09: 0000000000000000 [ 773.497269] R10: 00000000009b3262 R11: 0000000000000004 R12: 0000000000000000 [ 773.505418] R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000100 [ 773.540123] Mem-Info: [ 773.543912] active_anon:1349607 inactive_anon:184 isolated_anon:0 [ 773.543912] active_file:39 inactive_file:17 isolated_file:0 [ 773.543912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 773.543912] slab_reclaimable:16493 slab_unreclaimable:107843 [ 773.543912] mapped:52266 shmem:242 pagetables:23805 bounce:0 [ 773.543912] free:25091 free_pcp:35 free_cma:0 [ 773.578643] Node 0 active_anon:1963548kB inactive_anon:708kB active_file:40kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208924kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 773.607930] Node 1 active_anon:3434880kB inactive_anon:28kB active_file:72kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 773.636141] Node 0 DMA free:10536kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.671885] lowmem_reserve[]: 0 2580 2580 2580 [ 773.676714] Node 0 DMA32 free:36448kB min:36468kB low:45584kB high:54700kB active_anon:1961160kB inactive_anon:708kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45836kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 773.727102] lowmem_reserve[]: 0 0 0 0 [ 773.736778] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 773.775329] lowmem_reserve[]: 0 0 0 0 [ 773.779408] Node 1 Normal free:53016kB min:53420kB low:66772kB high:80124kB active_anon:3434880kB inactive_anon:28kB active_file:96kB inactive_file:848kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18752kB pagetables:49372kB bounce:0kB free_pcp:540kB local_pcp:8kB free_cma:0kB [ 773.817574] lowmem_reserve[]: 0 0 0 0 [ 773.821803] Node 0 DMA: 2*4kB (ME) 6*8kB (UME) 9*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10536kB [ 773.841693] Node 0 DMA32: 92*4kB (ME) 1206*8kB (UME) 923*16kB (UME) 325*32kB (UME) 4*64kB (M) 2*128kB (M) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36464kB [ 773.861552] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 773.874607] Node 1 Normal: 366*4kB (UME) 127*8kB (UME) 83*16kB (UME) 322*32kB (UME) 210*64kB (UME) 59*128kB (UM) 7*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 53280kB [ 773.896918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.906554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 773.918999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.928128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 773.939239] 456 total pagecache pages [ 773.943711] 0 pages in swap cache [ 773.947824] Swap cache stats: add 0, delete 0, find 0/0 [ 773.967474] Free swap = 0kB [ 773.970755] Total swap = 0kB [ 773.973883] 1965979 pages RAM [ 773.977254] 0 pages HighMem/MovableOnly [ 773.985695] 333229 pages reserved [ 773.989933] 0 pages cma reserved [ 773.993512] Out of memory: Kill process 20499 (syz-executor.0) score 1007 or sacrifice child [ 774.002511] Killed process 20499 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 774.047095] oom_reaper: reaped process 20499 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:36:09 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:09 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r26}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r26}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r26}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r26}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r26}, 0x30) ptrace$cont(0x1f, r27, 0x3, 0x80) lseek(r2, 0x3, 0x0) 04:36:09 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000380)={0x7, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/netfilter\x00') lseek(r1, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10400, 0x2b8a9c43e869a898) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/4084, 0xff4}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r4, 0x3, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000300)) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="000002", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000037c0)={0x0, 0x99, "d10e2096885d88e3d25cab016ccb7d2f24972252c73314637c7d5ccb90001899fbbf0fc378cf52ad94d380dd1eb5ff76a4505d8a1c181dcb01d499235b0851c9f80b8422355655dc01dc089956164cd45e60cae369d2467a2a1cd6c0235e0a3d8795761277f96e4451c8db20513b83e029dea2b45a17b3a0d0cdba1c5beab627790cbd4ffe3596e6bfc6b9c42992ffeab056a7d22adf712526"}, &(0x7f0000000780)=0xa1) sendmsg$inet_sctp(r5, &(0x7f0000003940)={&(0x7f00000005c0)=@in6={0xa, 0x4e22, 0xfffffff7, @ipv4={[], [], @rand_addr=0x1000}, 0x190a}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="e2489148f3ab6b7973067318ee819d2f93f137965f812458f69136787513d98556562fb615f61529bfd6cd13749d130a1e579fcd1b2c055eb6bc7d4bfe10aa407c606759f2f289b44f76e001ceaa9c4f01ec71c6e7c6214dd3cb6456a397ee65d04c9d623dcbbe0e4eef66d84b2d7520efbbf14045a97bf47df92ed441d34268acb1cacac47babdd451aab60d62f2b9a6fb3b74b9bebbca5bacfb0384bca2358b4accf0f53d9acddebd6f05d1cac09c8438d23ba4b3a2bf8964c1e6a1b2a3adab798ea06", 0xc4}], 0x1, &(0x7f0000003880)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x1, 0x4220cc76a3480a0a, 0x7fffffff, 0x800, 0x27, 0xfffffffa, 0x0, r8}}, @init={0x18, 0x84, 0x0, {0x4, 0x5, 0x8798, 0xbb}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x2, 0x1, 0x3, 0x0, 0x1, 0x2, 0x8, r9}}], 0x98, 0x40800}, 0x800) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r11 = getpgid(r10) process_vm_readv(r11, &(0x7f0000000580)=[{&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000600)=[{&(0x7f00000005c0)}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r12, 0x6, 0x17, 0x0, &(0x7f0000000300)) r13 = getpgrp(0x0) fcntl$lock(r12, 0x25, &(0x7f00000003c0)={0x3, 0x0, 0xb1fb, 0x6, r13}) rt_sigtimedwait(&(0x7f0000000340)={0x7fffffff}, &(0x7f0000000180), &(0x7f0000000280), 0xb8) 04:36:09 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 04:36:09 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x2) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000003c0)="4a558461f4d510ba141cd0e2bf2bc1c8", 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000300)) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000046893000100004035a5fccf7f3ae321b4069ab811a0dd124303067d1a4651cd3fb17cd158e3b6a59b527702cd30e4dda3e9b56b1a375252ac00"/74], 0x4a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4084, 0xff4}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x2, "bd48"}, &(0x7f0000000240)=0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000280)={r6, 0xfffd, 0xa, [0x8001, 0x8000, 0xfff7, 0x400, 0x1000, 0x9, 0x8001, 0x6, 0x8, 0x2]}, 0x1c) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) lseek(r4, 0x3, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) 04:36:09 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x3c) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x220, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioprio_get$pid(0x1, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/176, 0xb0}], 0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x2, r8, &(0x7f00000007c0), 0x20000000, 0x0) ptrace$getregs(0xe, r8, 0x9, &(0x7f00000001c0)=""/68) r9 = getpgid(r8) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000000)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = inotify_init1(0x0) r16 = gettid() fcntl$setown(r15, 0x8, r16) r17 = getpid() r18 = socket(0xa, 0x3, 0x8) r19 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r18, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r21 = gettid() waitid(0x83b895581628fca4, r21, &(0x7f0000000740), 0x40000000, &(0x7f0000000480)) sendmsg$key(r18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r20, @ANYRESDEC=r21]], 0xfffffffffffffe56}}, 0x20004850) r22 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r23 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r24 = dup2(r23, r22) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r24, 0xc08c5334, &(0x7f0000000200)) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r25}, 0x0) kcmp(r25, r25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r25, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r21, r24, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r27}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r13, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r10, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r7, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='\'\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r5, 0x0, 0xd, &(0x7f0000000340)='&selinuxself\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='@\xd7vboxnet1\x00', r27}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r27}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=']-+\x00', r27}, 0x30) ptrace$cont(0x1f, r28, 0x3, 0x80) lseek(r2, 0x3, 0x0) [ 774.339540] devpts: called with bogus options [ 774.354443] devpts: called with bogus options 04:36:09 executing program 5: getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1002000000013) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 774.410742] sctp: [Deprecated]: syz-executor.4 (pid 23377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 774.410742] Use struct sctp_sack_info instead [ 774.950156] net_ratelimit: 26 callbacks suppressed [ 774.950162] protocol 88fb is buggy, dev hsr_slave_0 [ 774.960704] protocol 88fb is buggy, dev hsr_slave_1 [ 774.965974] protocol 88fb is buggy, dev hsr_slave_0 [ 774.971331] protocol 88fb is buggy, dev hsr_slave_1 [ 775.560681] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 775.590178] protocol 88fb is buggy, dev hsr_slave_0 [ 775.593307] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 775.596522] protocol 88fb is buggy, dev hsr_slave_1 [ 775.603390] CPU: 1 PID: 6927 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 775.610506] protocol 88fb is buggy, dev hsr_slave_0 [ 775.617488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.623168] protocol 88fb is buggy, dev hsr_slave_1 [ 775.632892] Call Trace: [ 775.632912] dump_stack+0x138/0x197 [ 775.632927] dump_header+0x177/0x6cd [ 775.632938] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 775.655235] ? ___ratelimit+0x55/0x537 [ 775.659634] oom_kill_process.cold+0x10/0xadd [ 775.664247] ? rcu_read_unlock_special+0x639/0xd40 [ 775.669547] ? lock_downgrade+0x740/0x740 [ 775.674015] out_of_memory+0x2ee/0x1180 [ 775.678312] ? lock_acquire+0x16f/0x430 [ 775.682649] ? oom_killer_disable+0x1d0/0x1d0 [ 775.687365] ? __alloc_pages_slowpath+0xca4/0x2930 [ 775.692480] __alloc_pages_slowpath+0x2251/0x2930 [ 775.698140] ? __alloc_pages_nodemask+0x639/0x7a0 [ 775.703708] ? warn_alloc+0xf0/0xf0 [ 775.707444] ? __might_sleep+0x93/0xb0 [ 775.711422] __alloc_pages_nodemask+0x62c/0x7a0 [ 775.716101] ? __alloc_pages_slowpath+0x2930/0x2930 [ 775.721212] ? lock_downgrade+0x740/0x740 [ 775.725461] ? find_get_entry+0x23c/0x520 [ 775.729790] alloc_pages_current+0xec/0x1e0 [ 775.734380] __page_cache_alloc+0x248/0x3e0 [ 775.738850] filemap_fault+0xcc9/0x19a0 [ 775.742874] ? radix_tree_next_chunk+0x43e/0x9a0 [ 775.747785] ? __lock_page_or_retry+0x8d0/0x8d0 [ 775.750176] protocol 88fb is buggy, dev hsr_slave_0 [ 775.752552] ? lock_acquire+0x16f/0x430 [ 775.757791] protocol 88fb is buggy, dev hsr_slave_1 [ 775.761902] ? ext4_filemap_fault+0x7b/0xb0 [ 775.761914] ext4_filemap_fault+0x83/0xb0 [ 775.761922] __do_fault+0x104/0x390 [ 775.761931] __handle_mm_fault+0x2460/0x3470 [ 775.761944] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 775.788994] ? find_held_lock+0x35/0x130 [ 775.793170] ? handle_mm_fault+0x1b6/0x7c0 [ 775.797420] handle_mm_fault+0x293/0x7c0 [ 775.802448] __do_page_fault+0x4c1/0xb80 [ 775.806896] ? vmalloc_fault+0xe30/0xe30 [ 775.811102] ? page_fault+0x2f/0x50 [ 775.814738] do_page_fault+0x71/0x511 [ 775.818955] ? page_fault+0x2f/0x50 [ 775.822702] page_fault+0x45/0x50 [ 775.826344] RIP: 0033:0x40dc52 [ 775.829628] RSP: 002b:00007ffeeb1a09d0 EFLAGS: 00010202 [ 775.835171] RAX: 0000000000000000 RBX: 00000000000bd1fa RCX: 00000000004583f0 [ 775.842954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffeeb1a09b0 [ 775.850329] RBP: 00000000000008ee R08: 0000000000000001 R09: 0000000001593940 [ 775.858157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 775.865922] R13: 00007ffeeb1a0a00 R14: 00000000000bd092 R15: 00007ffeeb1a0a10 [ 775.967422] Mem-Info: [ 775.970204] active_anon:1349156 inactive_anon:181 isolated_anon:0 [ 775.970204] active_file:7 inactive_file:0 isolated_file:0 [ 775.970204] unevictable:0 dirty:0 writeback:0 unstable:0 [ 775.970204] slab_reclaimable:16592 slab_unreclaimable:108224 [ 775.970204] mapped:52220 shmem:242 pagetables:23856 bounce:0 [ 775.970204] free:25094 free_pcp:0 free_cma:0 [ 776.024458] Node 0 active_anon:1963964kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 776.054837] Node 1 active_anon:3432680kB inactive_anon:16kB active_file:132kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 776.083384] Node 0 DMA free:10532kB min:216kB low:268kB high:320kB active_anon:2388kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.111058] lowmem_reserve[]: 0 2580 2580 2580 [ 776.115947] Node 0 DMA32 free:36448kB min:36468kB low:45584kB high:54700kB active_anon:1961576kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.170114] lowmem_reserve[]: 0 0 0 0 [ 776.181561] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.235604] lowmem_reserve[]: 0 0 0 0 [ 776.239651] Node 1 Normal free:53412kB min:53420kB low:66772kB high:80124kB active_anon:3432680kB inactive_anon:16kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18880kB pagetables:49644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 776.271880] lowmem_reserve[]: 0 0 0 0 [ 776.275728] Node 0 DMA: 3*4kB (UME) 5*8kB (UME) 9*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10532kB [ 776.362961] Node 0 DMA32: 86*4kB (UME) 1217*8kB (UE) 912*16kB (UME) 328*32kB (UME) 4*64kB (M) 2*128kB (M) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36448kB [ 776.457487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 776.566291] Node 1 Normal: 300*4kB (UME) 113*8kB (UM) 56*16kB (UME) 306*32kB (UME) 229*64kB (UME) 63*128kB (UM) 7*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 53688kB [ 776.624635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 776.644886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 776.675523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 776.714160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 776.807340] 285 total pagecache pages [ 776.811942] 0 pages in swap cache [ 776.816794] Swap cache stats: add 0, delete 0, find 0/0 [ 776.822235] Free swap = 0kB [ 776.825530] Total swap = 0kB [ 776.828890] 1965979 pages RAM [ 776.832055] 0 pages HighMem/MovableOnly [ 776.836113] 333229 pages reserved [ 776.839560] 0 pages cma reserved [ 776.843612] Out of memory: Kill process 20558 (syz-executor.0) score 1007 or sacrifice child [ 776.852904] Killed process 20558 (syz-executor.0) total-vm:72984kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 778.082478] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 778.098346] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 778.104362] CPU: 1 PID: 23391 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 778.111653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.121008] Call Trace: [ 778.123594] dump_stack+0x138/0x197 [ 778.127217] warn_alloc.cold+0x96/0x1af [ 778.131180] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 778.136015] ? __alloc_pages_direct_compact+0xbc/0x380 [ 778.141301] __alloc_pages_slowpath+0x23c6/0x2930 [ 778.146135] ? save_trace+0x290/0x290 [ 778.149924] ? warn_alloc+0xf0/0xf0 [ 778.153541] ? __might_sleep+0x93/0xb0 [ 778.157425] __alloc_pages_nodemask+0x62c/0x7a0 [ 778.162083] ? __alloc_pages_slowpath+0x2930/0x2930 [ 778.167355] ? ____cache_alloc_node+0x1be/0x1d0 [ 778.172099] ? cache_grow_begin+0x335/0x400 [ 778.176498] cache_grow_begin+0x80/0x400 [ 778.180547] ? __cpuset_node_allowed+0xff/0x450 [ 778.185288] fallback_alloc+0x1fd/0x2c0 [ 778.189249] ____cache_alloc_node+0x1be/0x1d0 [ 778.193731] __kmalloc+0x21a/0x7a0 [ 778.197253] ? __lockdep_init_map+0x10c/0x570 [ 778.201994] ? kasan_unpoison_shadow+0x35/0x50 [ 778.206572] ? mempool_kmalloc+0x1e/0x30 [ 778.210615] ? mempool_resize+0x600/0x600 [ 778.214746] mempool_kmalloc+0x1e/0x30 [ 778.218616] mempool_create_node+0x2d6/0x3d0 [ 778.223008] ? mempool_resize+0x600/0x600 [ 778.227138] ? generic_file_write_iter+0x660/0x660 [ 778.232049] mempool_create+0x3a/0x50 [ 778.235869] ceph_mount+0x706/0x1709 [ 778.239585] ? __lockdep_init_map+0x10c/0x570 [ 778.244088] mount_fs+0x97/0x2a1 [ 778.247464] vfs_kern_mount.part.0+0x5e/0x3d0 [ 778.251952] do_mount+0x417/0x27d0 [ 778.255489] ? copy_mount_string+0x40/0x40 [ 778.259737] ? memdup_user+0x58/0xa0 [ 778.263445] ? copy_mount_options+0x1fe/0x2f0 [ 778.267939] SyS_mount+0xab/0x120 [ 778.271464] ? copy_mnt_ns+0x8c0/0x8c0 [ 778.275337] do_syscall_64+0x1e8/0x640 [ 778.279206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.284038] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.289208] RIP: 0033:0x459f49 [ 778.292377] RSP: 002b:00007f12cbd0bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 778.300067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f49 [ 778.307336] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 778.314590] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 778.321844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12cbd0c6d4 [ 778.329095] R13: 00000000004c69b2 R14: 00000000004dbe18 R15: 00000000ffffffff [ 778.350520] Mem-Info: [ 778.353016] active_anon:1348517 inactive_anon:182 isolated_anon:0 [ 778.353016] active_file:3 inactive_file:116 isolated_file:13 [ 778.353016] unevictable:0 dirty:1 writeback:0 unstable:0 [ 778.353016] slab_reclaimable:16610 slab_unreclaimable:108757 [ 778.353016] mapped:52270 shmem:242 pagetables:23847 bounce:0 [ 778.353016] free:25043 free_pcp:53 free_cma:0 [ 778.386422] Node 0 active_anon:1963976kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1245184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 778.414102] Node 1 active_anon:3430092kB inactive_anon:20kB active_file:212kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):164kB mapped:276kB dirty:4kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 778.441289] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:2404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.467978] lowmem_reserve[]: 0 2580 2580 2580 [ 778.472641] Node 0 DMA32 free:36452kB min:36468kB low:45584kB high:54700kB active_anon:1961572kB inactive_anon:708kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:14592kB pagetables:45756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.503234] lowmem_reserve[]: 0 0 0 0 [ 778.507068] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.533017] lowmem_reserve[]: 0 0 0 0 [ 778.536878] Node 1 Normal free:53356kB min:53420kB low:66772kB high:80124kB active_anon:3430812kB inactive_anon:20kB active_file:108kB inactive_file:48kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:18656kB pagetables:49616kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 778.565854] lowmem_reserve[]: 0 0 0 0 [ 778.569664] Node 0 DMA: 2*4kB (ME) 7*8kB (UME) 8*16kB (UM) 7*32kB (UE) 4*64kB (UME) 3*128kB (ME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10528kB [ 778.585436] Node 0 DMA32: 87*4kB (UME) 1217*8kB (UE) 912*16kB (UME) 328*32kB (UME) 4*64kB (M) 2*128kB (M) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 36452kB [ 778.600613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 778.611574] Node 1 Normal: 340*4kB (UME) 89*8kB (UME) 79*16kB (UME) 271*32kB (UME) 231*64kB (UME) 57*128kB (UM) 10*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 53544kB [ 778.630791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.639678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 778.648693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.657602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 778.666239] 282 total pagecache pages [ 778.670108] 0 pages in swap cache [ 778.673556] Swap cache stats: add 0, delete 0, find 0/0 [ 778.678907] Free swap = 0kB [ 778.682068] Total swap = 0kB [ 778.685085] 1965979 pages RAM [ 778.688189] 0 pages HighMem/MovableOnly [ 778.692217] 333229 pages reserved [ 778.695698] 0 pages cma reserved [ 778.700877] ================================================================== [ 778.708658] BUG: KASAN: use-after-free in ceph_destroy_options+0xe9/0x110 [ 778.715593] Read of size 8 at addr ffff888094836e10 by task syz-executor.5/23391 [ 778.723114] [ 778.724745] CPU: 1 PID: 23391 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 778.731765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.741207] Call Trace: [ 778.743810] dump_stack+0x138/0x197 [ 778.747446] ? ceph_destroy_options+0xe9/0x110 [ 778.752036] print_address_description.cold+0x7c/0x1dc [ 778.757336] ? ceph_destroy_options+0xe9/0x110 [ 778.761939] kasan_report.cold+0xa9/0x2af [ 778.766685] __asan_report_load8_noabort+0x14/0x20 [ 778.771601] ceph_destroy_options+0xe9/0x110 [ 778.775991] ceph_mount+0xb6d/0x1709 [ 778.779705] ? __lockdep_init_map+0x10c/0x570 [ 778.784195] mount_fs+0x97/0x2a1 [ 778.787553] vfs_kern_mount.part.0+0x5e/0x3d0 [ 778.792030] do_mount+0x417/0x27d0 [ 778.795560] ? copy_mount_string+0x40/0x40 [ 778.799952] ? memdup_user+0x58/0xa0 [ 778.803652] ? copy_mount_options+0x1fe/0x2f0 [ 778.809178] SyS_mount+0xab/0x120 [ 778.812976] ? copy_mnt_ns+0x8c0/0x8c0 [ 778.816874] do_syscall_64+0x1e8/0x640 [ 778.820767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.825649] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.830831] RIP: 0033:0x459f49 [ 778.834007] RSP: 002b:00007f12cbd0bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 778.841699] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f49 [ 778.848956] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 778.856463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 778.864703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12cbd0c6d4 [ 778.871996] R13: 00000000004c69b2 R14: 00000000004dbe18 R15: 00000000ffffffff [ 778.879266] [ 778.880894] Allocated by task 23391: [ 778.884604] save_stack_trace+0x16/0x20 [ 778.888566] save_stack+0x45/0xd0 [ 778.892000] kasan_kmalloc+0xce/0xf0 [ 778.895718] kmem_cache_alloc_trace+0x152/0x790 [ 778.900388] ceph_parse_options+0xb8/0xe80 [ 778.905237] ceph_mount+0x3c1/0x1709 [ 778.908958] mount_fs+0x97/0x2a1 [ 778.912307] vfs_kern_mount.part.0+0x5e/0x3d0 [ 778.916783] do_mount+0x417/0x27d0 [ 778.920304] SyS_mount+0xab/0x120 [ 778.923824] do_syscall_64+0x1e8/0x640 [ 778.927689] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.932863] [ 778.934469] Freed by task 23391: [ 778.937824] save_stack_trace+0x16/0x20 [ 778.941776] save_stack+0x45/0xd0 [ 778.945468] kasan_slab_free+0x75/0xc0 [ 778.949337] kfree+0xcc/0x270 [ 778.952422] ceph_destroy_options+0xdc/0x110 [ 778.956807] ceph_destroy_client+0x9d/0xc0 [ 778.961040] ceph_mount+0xb46/0x1709 [ 778.964820] mount_fs+0x97/0x2a1 [ 778.968171] vfs_kern_mount.part.0+0x5e/0x3d0 [ 778.972644] do_mount+0x417/0x27d0 [ 778.976178] SyS_mount+0xab/0x120 [ 778.979615] do_syscall_64+0x1e8/0x640 [ 778.983498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.988662] [ 778.990280] The buggy address belongs to the object at ffff888094836d40 [ 778.990280] which belongs to the cache kmalloc-256 of size 256 [ 779.003496] The buggy address is located 208 bytes inside of [ 779.003496] 256-byte region [ffff888094836d40, ffff888094836e40) [ 779.015348] The buggy address belongs to the page: [ 779.020783] page:ffffea0002520d80 count:1 mapcount:0 mapping:ffff8880948360c0 index:0xffff888094836700 [ 779.030229] flags: 0x1fffc0000000100(slab) [ 779.034538] raw: 01fffc0000000100 ffff8880948360c0 ffff888094836700 0000000100000006 [ 779.042591] raw: ffffea00029cbce0 ffffea0002a50420 ffff8880aa8007c0 0000000000000000 [ 779.050656] page dumped because: kasan: bad access detected [ 779.056643] [ 779.058251] Memory state around the buggy address: [ 779.063162] ffff888094836d00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 779.070845] ffff888094836d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 779.078181] >ffff888094836e00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 779.085515] ^ [ 779.089391] ffff888094836e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 779.096737] ffff888094836f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 779.104246] ================================================================== [ 779.111582] Disabling lock debugging due to kernel taint [ 779.117471] Kernel panic - not syncing: panic_on_warn set ... [ 779.117471] [ 779.124923] CPU: 1 PID: 23391 Comm: syz-executor.5 Tainted: G B 4.14.151 #0 [ 779.133169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.142530] Call Trace: [ 779.145122] dump_stack+0x138/0x197 [ 779.148741] ? ceph_destroy_options+0xe9/0x110 [ 779.153315] panic+0x1f9/0x42d [ 779.156513] ? add_taint.cold+0x16/0x16 [ 779.160491] ? ___preempt_schedule+0x16/0x18 [ 779.164895] kasan_end_report+0x47/0x4f [ 779.168885] kasan_report.cold+0x130/0x2af [ 779.173122] __asan_report_load8_noabort+0x14/0x20 [ 779.178218] ceph_destroy_options+0xe9/0x110 [ 779.182623] ceph_mount+0xb6d/0x1709 [ 779.186379] ? __lockdep_init_map+0x10c/0x570 [ 779.190879] mount_fs+0x97/0x2a1 [ 779.194245] vfs_kern_mount.part.0+0x5e/0x3d0 [ 779.198736] do_mount+0x417/0x27d0 [ 779.202271] ? copy_mount_string+0x40/0x40 [ 779.206520] ? memdup_user+0x58/0xa0 [ 779.210222] ? copy_mount_options+0x1fe/0x2f0 [ 779.214768] SyS_mount+0xab/0x120 [ 779.218211] ? copy_mnt_ns+0x8c0/0x8c0 [ 779.222266] do_syscall_64+0x1e8/0x640 [ 779.226142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 779.231243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 779.236433] RIP: 0033:0x459f49 [ 779.239796] RSP: 002b:00007f12cbd0bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 779.247939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f49 [ 779.255208] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 779.262916] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 779.267449] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 779.270204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12cbd0c6d4 [ 779.270209] R13: 00000000004c69b2 R14: 00000000004dbe18 R15: 00000000ffffffff [ 779.271538] Kernel Offset: disabled [ 779.299709] Rebooting in 86400 seconds..