SARP(r2, 0x8955, &(0x7f0000000a00)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, {0x306, @random="152c1d74714a"}, 0x40, {0x2, 0x4e20, @loopback}, 'vcan0\x00'}) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/229) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = eventfd2(0x3, 0x80001) r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000009c0), 0x4) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x06\xc8\xb3}D7\xcf\xbd\x1b\xef\x15\xeaH|v\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\x90w\xd6\xfe7\x0f\xfd\b\xa4R\xe7\xba\xad\xabc3\xbf\x9b\xee\xf0\xaa\xffr\xeb\xd9\x81\xb7\xac\x89\xf3\xa6\xe3\x8b\xff\xfa\xbf\x80\xe9\x92\xbc\xd5\x12\xf4$\xeb\xb1Q*?\xa63u\x0e\xf9\xe0\x00\xf0i\x8c\xf4\x8c\xd9\xfc?\x1b\xd7\xc2\xc8Y\xb4B\x96\xff\x02\xb3j\xef7\xeed\x9d\xab\xb5\xc5\x17\xd3\x8a\xe3\xcc\xaf#\x1c\x1c\xda\xbfOB\x1fp\xc6\xea@#\x8e\xe3\xa6\xfd\x16\xd7\xfbr\xa1J\xe6\x92%\xde\x97\xd7\xf9\xf0\'\x9fUg\x0e(\xca\xfa\x93c\x18\xccM\xd3\xbd\xa6\'\xf7\x19\f\xcd\xf6G\xd5&V\xcbRq\xb4y\'t\xbe\x93cE3\xd8\xe4\xbd\v\xd3Z\xc0\xbf\xa4\x91z$K\x10^\xfd\xaaa1qB`\x9e6\xa3X_D6Sk', 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0xffffff6c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000200)='?\x00', 0x2, 0x1) fsetxattr$security_selinux(r6, &(0x7f0000000800)='security.selinux\x00', &(0x7f0000000840)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = dup(r7) ioctl$EVIOCGUNIQ(r8, 0x80404508, 0x0) ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f00000001c0)=""/118) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0xd77a1639086d8d70, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000280)=0xffff, 0x4) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="ffffff7f0000000005000000000000000000000000000000d2cf27df87b7", @ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="000000000300"/28, @ANYRES32=r4, @ANYBLOB="00000000cb0100"/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00 \x00'/28, @ANYRES32=r9, @ANYBLOB="04000000030000000022000000000000000000ffffffffffffffff00", @ANYRES32=r3, @ANYBLOB='\x00'/28, @ANYRES32=r5, @ANYBLOB="00000000008000"/28, @ANYRES32=r4, @ANYBLOB="000000000300"/28, @ANYRES32=r4, @ANYBLOB="00000000976a00"/28]) pread64(r5, &(0x7f0000000440)=""/191, 0xbf, 0x50) shmget(0x1, 0x2000, 0x2a0, &(0x7f0000ffd000/0x2000)=nil) r10 = geteuid() getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r13, r14, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0x5, &(0x7f00000003c0), 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getegid() fcntl$getown(r4, 0x9) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000b80)={{0x6, r15, r11, r10, r12, 0x0, 0x5}, 0x8, 0x7ff, 0x2, 0x8, r16, r16, 0xffff}) 23:46:18 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:19 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 2974.290151][ C0] net_ratelimit: 14 callbacks suppressed [ 2974.290179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2974.301632][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2974.450220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2974.456053][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.010575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.016396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.250748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.256588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.410801][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.416604][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:21 executing program 1: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) r1 = getpgrp(0x0) capget(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_script(r3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(r3) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$amidi(0x0, 0x9c4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) r6 = getpid() waitid(0x83b895581628fca7, r6, &(0x7f0000000040), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) r8 = syz_open_dev$sg(0x0, 0x0, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3", 0x12}], 0x1) getpgid(r1) ptrace$setopts(0x4206, r7, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa1}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r9, 0x407, 0xfffffffffffffffe) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r11 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r11, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) sendfile(r9, r10, 0x0, 0x102000004) 23:46:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:21 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:24 executing program 1: getpid() sched_setscheduler(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) close(0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r0, 0x407, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(0x0, 0x2, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) 23:46:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:24 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:24 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:25 executing program 1: pivot_root(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) rmdir(&(0x7f0000000240)='./file0\x00') 23:46:25 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:25 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2979.413105][ C1] net_ratelimit: 16 callbacks suppressed [ 2979.413115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.424616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2979.583189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.589072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2980.533784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2980.539584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2980.693851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2980.699709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.254189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.260071][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x42, 0x0, 0x0) 23:46:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:27 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:27 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe) 23:46:28 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:28 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2984.696157][ C0] net_ratelimit: 14 callbacks suppressed [ 2984.701836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2984.707599][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2984.856263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2984.862087][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:31 executing program 1: tkill(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getsadinfo={0x14, 0x23, 0x509}, 0x14}}, 0x0) 23:46:31 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:31 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r2 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, @perf_config_ext, 0x20020, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) 23:46:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2985.416568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.422380][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2985.656736][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.662551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.816827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.822612][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:34 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000b00)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 23:46:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:34 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 2988.149164][ T26] audit: type=1800 audit(1576799194.156:20799): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17137 res=0 23:46:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:34 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:34 executing program 1: mknod$loop(&(0x7f00000018c0)='./file0\x00', 0x1, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x9) clone(0x2100001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20600) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:46:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2989.819112][ C1] net_ratelimit: 16 callbacks suppressed [ 2989.819135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.830582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.979186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.984969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2990.939747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2990.945616][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2991.099827][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2991.105643][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:37 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:37 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:37 executing program 1: mknod$loop(&(0x7f00000018c0)='./file0\x00', 0x1, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x9) clone(0x2100001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20600) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:46:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:37 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800], 0x0, 0x0, &(0x7f0000000800)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) 23:46:37 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) [ 2991.660137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2991.665961][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e004b9) 23:46:38 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:38 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 23:46:38 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 23:46:40 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x102000004) 23:46:40 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e004b9) 23:46:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 23:46:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 23:46:41 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) 23:46:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 2995.102041][ C0] net_ratelimit: 14 callbacks suppressed [ 2995.102051][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.113511][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:41 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) [ 2995.262125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.267946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.822481][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.828400][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2996.062640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.068504][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2996.222683][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.228554][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:43 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) 23:46:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 23:46:43 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:43 executing program 1: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x2}, 0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)) 23:46:44 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) 23:46:44 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) 23:46:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = accept(0xffffffffffffff9c, &(0x7f0000000280)=@isdn, &(0x7f0000000080)=0x80) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000005740)={{{@in=@initdev, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000005840)=0xe8) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) kcmp(r0, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 23:46:44 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) 23:46:44 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) [ 2998.720396][T16018] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2998.754328][T16018] CPU: 0 PID: 16018 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 2998.763052][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.773118][T16018] Call Trace: [ 2998.776438][T16018] dump_stack+0x11d/0x181 [ 2998.780792][T16018] dump_header+0xaa/0x39c [ 2998.785309][T16018] oom_kill_process.cold+0x10/0x15 [ 2998.790444][T16018] out_of_memory+0x231/0xa60 [ 2998.795098][T16018] ? __rcu_read_unlock+0x66/0x3d0 [ 2998.800162][T16018] mem_cgroup_out_of_memory+0x128/0x150 [ 2998.805764][T16018] try_charge+0xb6c/0xbf0 [ 2998.810133][T16018] ? __mod_lruvec_state+0x70/0x1e0 [ 2998.815359][T16018] ? __rcu_read_unlock+0x66/0x3d0 [ 2998.820436][T16018] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2998.825883][T16018] __memcg_kmem_charge+0xcf/0x1b0 [ 2998.830943][T16018] copy_process+0x11d2/0x3c40 [ 2998.835711][T16018] _do_fork+0xfe/0x7a0 [ 2998.839784][T16018] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2998.845676][T16018] ? __read_once_size+0x5a/0xe0 [ 2998.850602][T16018] __x64_sys_clone+0x130/0x170 [ 2998.855514][T16018] do_syscall_64+0xcc/0x3a0 [ 2998.860092][T16018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.866006][T16018] RIP: 0033:0x45a919 [ 2998.869891][T16018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2998.889491][T16018] RSP: 002b:00007f00bcd92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2998.897955][T16018] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a919 [ 2998.905910][T16018] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000010000103 [ 2998.914587][T16018] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 2998.922545][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00bcd936d4 [ 2998.930502][T16018] R13: 00000000004c1007 R14: 00000000004d4d28 R15: 00000000ffffffff [ 2998.938766][T16018] memory: usage 307200kB, limit 307200kB, failcnt 1749 [ 2998.945849][T16018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2998.952702][T16018] Memory cgroup stats for /syz0: [ 2998.952814][T16018] anon 282304512 [ 2998.952814][T16018] file 0 [ 2998.952814][T16018] kernel_stack 2838528 [ 2998.952814][T16018] slab 5386240 [ 2998.952814][T16018] sock 0 [ 2998.952814][T16018] shmem 81920 [ 2998.952814][T16018] file_mapped 0 [ 2998.952814][T16018] file_dirty 0 [ 2998.952814][T16018] file_writeback 0 [ 2998.952814][T16018] anon_thp 262144000 [ 2998.952814][T16018] inactive_anon 135168 [ 2998.952814][T16018] active_anon 282361856 [ 2998.952814][T16018] inactive_file 12288 [ 2998.952814][T16018] active_file 53248 [ 2998.952814][T16018] unevictable 0 [ 2998.952814][T16018] slab_reclaimable 946176 [ 2998.952814][T16018] slab_unreclaimable 4440064 [ 2998.952814][T16018] pgfault 254529 [ 2998.952814][T16018] pgmajfault 2046 [ 2998.952814][T16018] workingset_refault 0 [ 2998.952814][T16018] workingset_activate 0 [ 2998.952814][T16018] workingset_nodereclaim 0 [ 2998.952814][T16018] pgrefill 3494 [ 2998.952814][T16018] pgscan 4953 [ 2998.952814][T16018] pgsteal 3288 [ 2999.046781][T16018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14509,uid=0 [ 2999.062368][T16018] Memory cgroup out of memory: Killed process 14509 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2999.081586][ T1067] oom_reaper: reaped process 14509 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2999.093812][T15767] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2999.107822][T15767] CPU: 1 PID: 15767 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 2999.116570][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2999.126750][T15767] Call Trace: [ 2999.130028][T15767] dump_stack+0x11d/0x181 [ 2999.134347][T15767] dump_header+0xaa/0x39c [ 2999.138702][T15767] oom_kill_process.cold+0x10/0x15 [ 2999.143815][T15767] out_of_memory+0x231/0xa60 [ 2999.148520][T15767] mem_cgroup_out_of_memory+0x128/0x150 [ 2999.154051][T15767] try_charge+0x800/0xbf0 [ 2999.158369][T15767] ? rcu_note_context_switch+0x6d0/0x760 [ 2999.164143][T15767] mem_cgroup_try_charge+0xd2/0x260 [ 2999.169368][T15767] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2999.174999][T15767] __handle_mm_fault+0x197f/0x2e00 [ 2999.180122][T15767] handle_mm_fault+0x21b/0x530 [ 2999.184961][T15767] __do_page_fault+0x456/0x8d0 [ 2999.189844][T15767] do_page_fault+0x38/0x194 [ 2999.194343][T15767] page_fault+0x34/0x40 [ 2999.198602][T15767] RIP: 0033:0x41210f [ 2999.202484][T15767] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2999.222169][T15767] RSP: 002b:00007fffa03b5580 EFLAGS: 00010206 [ 2999.228220][T15767] RAX: 00007f00bcd52000 RBX: 0000000000020000 RCX: 000000000045a96a [ 2999.236176][T15767] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2999.244152][T15767] RBP: 00007fffa03b5660 R08: ffffffffffffffff R09: 0000000000000000 [ 2999.252114][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa03b5750 [ 2999.260102][T15767] R13: 00007f00bcd72700 R14: 0000000000000002 R15: 000000000075c07c [ 2999.270482][T15767] memory: usage 304988kB, limit 307200kB, failcnt 1749 [ 2999.277461][T15767] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2999.284289][T15767] Memory cgroup stats for /syz0: [ 2999.284775][T15767] anon 280199168 [ 2999.284775][T15767] file 0 [ 2999.284775][T15767] kernel_stack 2838528 [ 2999.284775][T15767] slab 5386240 [ 2999.284775][T15767] sock 0 [ 2999.284775][T15767] shmem 81920 [ 2999.284775][T15767] file_mapped 0 [ 2999.284775][T15767] file_dirty 0 [ 2999.284775][T15767] file_writeback 0 [ 2999.284775][T15767] anon_thp 260046848 [ 2999.284775][T15767] inactive_anon 135168 [ 2999.284775][T15767] active_anon 280203264 [ 2999.284775][T15767] inactive_file 12288 [ 2999.284775][T15767] active_file 53248 [ 2999.284775][T15767] unevictable 0 [ 2999.284775][T15767] slab_reclaimable 946176 [ 2999.284775][T15767] slab_unreclaimable 4440064 [ 2999.284775][T15767] pgfault 254529 [ 2999.284775][T15767] pgmajfault 2046 [ 2999.284775][T15767] workingset_refault 0 [ 2999.284775][T15767] workingset_activate 0 [ 2999.284775][T15767] workingset_nodereclaim 0 [ 2999.284775][T15767] pgrefill 3494 [ 2999.284775][T15767] pgscan 4953 [ 2999.284775][T15767] pgsteal 3288 [ 2999.379320][T15767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10495,uid=0 [ 2999.395730][T15767] Memory cgroup out of memory: Killed process 10495 (syz-executor.0) total-vm:72584kB, anon-rss:2212kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2999.415413][ T1067] oom_reaper: reaped process 10495 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3000.224955][ C1] net_ratelimit: 17 callbacks suppressed [ 3000.230677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.236443][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.385009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.390849][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:47 executing program 1: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/4096) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r8, &(0x7f0000000000)="b6", 0xfffffe7e) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00') preadv(r9, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0x34c) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x2, r10, 0x1, 0x1, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r12 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') write$P9_RLINK(r12, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7) 23:46:47 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:47 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r0 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000004) 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) 23:46:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) 23:46:47 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write(r0, &(0x7f0000001740)="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", 0x1c7) 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3001.345570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.351377][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:47 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:46:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) [ 3001.505617][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.511459][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:46:47 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0xf0ffff) 23:46:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000004) 23:46:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:46:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:48 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3002.065963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.071895][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:48 executing program 1: 23:46:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:48 executing program 3: 23:46:48 executing program 1: 23:46:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:48 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:48 executing program 3: 23:46:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) r1 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x81804) sendfile(r0, r1, 0x0, 0x0) 23:46:48 executing program 1: 23:46:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3002.950695][T16473] ptrace attach of "/root/syz-executor.4"[16472] was attempted by "/root/syz-executor.4"[16473] [ 3003.199597][T16447] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3003.209942][T16447] CPU: 0 PID: 16447 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3003.218626][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3003.228674][T16447] Call Trace: [ 3003.231957][T16447] dump_stack+0x11d/0x181 [ 3003.236283][T16447] dump_header+0xaa/0x39c [ 3003.240605][T16447] oom_kill_process.cold+0x10/0x15 [ 3003.245768][T16447] out_of_memory+0x231/0xa60 [ 3003.250371][T16447] ? __rcu_read_unlock+0x66/0x3d0 [ 3003.255408][T16447] mem_cgroup_out_of_memory+0x128/0x150 [ 3003.261010][T16447] try_charge+0xb6c/0xbf0 [ 3003.265324][T16447] ? memcg_to_vmpressure+0x1b/0x50 [ 3003.270592][T16447] ? setup_fault_attr+0x50/0x120 [ 3003.275521][T16447] ? __rcu_read_unlock+0x66/0x3d0 [ 3003.280534][T16447] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3003.286068][T16447] __memcg_kmem_charge+0xcf/0x1b0 [ 3003.291083][T16447] copy_process+0x11d2/0x3c40 [ 3003.295748][T16447] ? record_times+0x16/0x90 [ 3003.300317][T16447] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3003.306377][T16447] _do_fork+0xfe/0x7a0 [ 3003.310540][T16447] ? cgroup_file_notify+0xff/0x130 [ 3003.315665][T16447] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3003.321749][T16447] __x64_sys_clone+0x130/0x170 [ 3003.326549][T16447] do_syscall_64+0xcc/0x3a0 [ 3003.331112][T16447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3003.336992][T16447] RIP: 0033:0x45d2e9 [ 3003.340909][T16447] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3003.360614][T16447] RSP: 002b:00007fffa03b5538 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3003.369013][T16447] RAX: ffffffffffffffda RBX: 00007f00bcd93700 RCX: 000000000045d2e9 [ 3003.376999][T16447] RDX: 00007f00bcd939d0 RSI: 00007f00bcd92db0 RDI: 00000000003d0f00 [ 3003.384984][T16447] RBP: 00007fffa03b5750 R08: 00007f00bcd93700 R09: 00007f00bcd93700 [ 3003.393058][T16447] R10: 00007f00bcd939d0 R11: 0000000000000202 R12: 0000000000000000 [ 3003.401104][T16447] R13: 00007fffa03b55ef R14: 00007f00bcd939c0 R15: 000000000075bfd4 [ 3003.409303][T16447] memory: usage 307200kB, limit 307200kB, failcnt 1773 [ 3003.416226][T16447] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3003.423085][T16447] Memory cgroup stats for /syz0: [ 3003.423305][T16447] anon 282357760 [ 3003.423305][T16447] file 0 [ 3003.423305][T16447] kernel_stack 2801664 [ 3003.423305][T16447] slab 5386240 [ 3003.423305][T16447] sock 0 [ 3003.423305][T16447] shmem 81920 [ 3003.423305][T16447] file_mapped 0 [ 3003.423305][T16447] file_dirty 0 [ 3003.423305][T16447] file_writeback 0 [ 3003.423305][T16447] anon_thp 262144000 [ 3003.423305][T16447] inactive_anon 135168 [ 3003.423305][T16447] active_anon 282361856 [ 3003.423305][T16447] inactive_file 12288 [ 3003.423305][T16447] active_file 53248 [ 3003.423305][T16447] unevictable 0 [ 3003.423305][T16447] slab_reclaimable 946176 [ 3003.423305][T16447] slab_unreclaimable 4440064 [ 3003.423305][T16447] pgfault 254760 [ 3003.423305][T16447] pgmajfault 2046 [ 3003.423305][T16447] workingset_refault 0 [ 3003.423305][T16447] workingset_activate 0 [ 3003.423305][T16447] workingset_nodereclaim 0 [ 3003.423305][T16447] pgrefill 3629 [ 3003.423305][T16447] pgscan 5019 [ 3003.423305][T16447] pgsteal 3288 [ 3003.517336][T16447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16044,uid=0 [ 3003.532828][T16447] Memory cgroup out of memory: Killed process 16044 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3003.552313][ T1067] oom_reaper: reaped process 16044 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 23:46:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:49 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:49 executing program 3: 23:46:49 executing program 5: 23:46:49 executing program 1: 23:46:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3003.679020][T16491] ptrace attach of "/root/syz-executor.4"[16489] was attempted by "/root/syz-executor.4"[16491] 23:46:49 executing program 5: 23:46:49 executing program 3: 23:46:49 executing program 1: 23:46:50 executing program 5: 23:46:50 executing program 3: [ 3004.354390][T16496] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3004.364726][T16496] CPU: 0 PID: 16496 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3004.373393][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3004.383443][T16496] Call Trace: [ 3004.386773][T16496] dump_stack+0x11d/0x181 [ 3004.391249][T16496] dump_header+0xaa/0x39c [ 3004.395651][T16496] oom_kill_process.cold+0x10/0x15 [ 3004.400761][T16496] out_of_memory+0x231/0xa60 [ 3004.405462][T16496] ? __rcu_read_unlock+0x66/0x3d0 [ 3004.410537][T16496] mem_cgroup_out_of_memory+0x128/0x150 [ 3004.416080][T16496] try_charge+0xb6c/0xbf0 [ 3004.420529][T16496] ? rcu_note_context_switch+0x6d0/0x760 [ 3004.426177][T16496] mem_cgroup_try_charge+0xd2/0x260 [ 3004.431442][T16496] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3004.437061][T16496] __handle_mm_fault+0x197f/0x2e00 [ 3004.442209][T16496] handle_mm_fault+0x21b/0x530 [ 3004.446994][T16496] __do_page_fault+0x456/0x8d0 [ 3004.451746][T16496] do_page_fault+0x38/0x194 [ 3004.456244][T16496] page_fault+0x34/0x40 [ 3004.460388][T16496] RIP: 0033:0x41210f [ 3004.464331][T16496] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 3004.483919][T16496] RSP: 002b:00007fffa03b5580 EFLAGS: 00010206 [ 3004.490046][T16496] RAX: 00007f00bcd73000 RBX: 0000000000020000 RCX: 000000000045a96a [ 3004.498017][T16496] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 3004.506086][T16496] RBP: 00007fffa03b5660 R08: ffffffffffffffff R09: 0000000000000000 [ 3004.514042][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa03b5750 [ 3004.522007][T16496] R13: 00007f00bcd93700 R14: 0000000000000001 R15: 000000000075bfd4 [ 3004.531051][T16496] memory: usage 307200kB, limit 307200kB, failcnt 1801 [ 3004.538013][T16496] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3004.544849][T16496] Memory cgroup stats for /syz0: [ 3004.544997][T16496] anon 282394624 [ 3004.544997][T16496] file 0 [ 3004.544997][T16496] kernel_stack 2801664 [ 3004.544997][T16496] slab 5386240 [ 3004.544997][T16496] sock 0 [ 3004.544997][T16496] shmem 81920 [ 3004.544997][T16496] file_mapped 0 [ 3004.544997][T16496] file_dirty 0 [ 3004.544997][T16496] file_writeback 0 [ 3004.544997][T16496] anon_thp 262144000 [ 3004.544997][T16496] inactive_anon 135168 [ 3004.544997][T16496] active_anon 282398720 [ 3004.544997][T16496] inactive_file 12288 [ 3004.544997][T16496] active_file 53248 [ 3004.544997][T16496] unevictable 0 [ 3004.544997][T16496] slab_reclaimable 946176 [ 3004.544997][T16496] slab_unreclaimable 4440064 [ 3004.544997][T16496] pgfault 254826 [ 3004.544997][T16496] pgmajfault 2046 [ 3004.544997][T16496] workingset_refault 0 [ 3004.544997][T16496] workingset_activate 0 [ 3004.544997][T16496] workingset_nodereclaim 0 [ 3004.544997][T16496] pgrefill 3729 [ 3004.544997][T16496] pgscan 5052 [ 3004.544997][T16496] pgsteal 3288 [ 3004.639409][T16496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16434,uid=0 23:46:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:50 executing program 1: 23:46:50 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:50 executing program 5: 23:46:50 executing program 3: [ 3004.654981][T16496] Memory cgroup out of memory: Killed process 16434 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3004.674237][ T1067] oom_reaper: reaped process 16434 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 23:46:50 executing program 1: 23:46:50 executing program 3: 23:46:50 executing program 5: 23:46:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:51 executing program 1: 23:46:51 executing program 3: 23:46:51 executing program 5: 23:46:51 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:51 executing program 5: 23:46:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:51 executing program 1: 23:46:51 executing program 3: [ 3005.507850][ C0] net_ratelimit: 14 callbacks suppressed [ 3005.507860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3005.519349][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:51 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:51 executing program 5: 23:46:51 executing program 1: [ 3005.677932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3005.683760][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3005.963713][T16549] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3005.974335][T16549] CPU: 1 PID: 16549 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3005.983013][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3005.993079][T16549] Call Trace: [ 3005.996416][T16549] dump_stack+0x11d/0x181 [ 3006.000772][T16549] dump_header+0xaa/0x39c [ 3006.005250][T16549] oom_kill_process.cold+0x10/0x15 [ 3006.010454][T16549] out_of_memory+0x231/0xa60 [ 3006.015070][T16549] ? __rcu_read_unlock+0x66/0x3d0 [ 3006.020121][T16549] mem_cgroup_out_of_memory+0x128/0x150 [ 3006.025854][T16549] try_charge+0xb6c/0xbf0 [ 3006.030183][T16549] ? rcu_note_context_switch+0x6d0/0x760 [ 3006.035871][T16549] mem_cgroup_try_charge+0xd2/0x260 [ 3006.041064][T16549] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3006.046681][T16549] wp_page_copy+0x322/0x1040 [ 3006.051385][T16549] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 3006.057222][T16549] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3006.062960][T16549] do_wp_page+0x192/0xeb0 [ 3006.067283][T16549] ? record_times+0x16/0x90 [ 3006.071824][T16549] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3006.077768][T16549] __handle_mm_fault+0x1d16/0x2e00 [ 3006.082947][T16549] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3006.089032][T16549] handle_mm_fault+0x21b/0x530 [ 3006.093818][T16549] __do_page_fault+0x456/0x8d0 [ 3006.098673][T16549] do_page_fault+0x38/0x194 [ 3006.103188][T16549] page_fault+0x34/0x40 [ 3006.107324][T16549] RIP: 0033:0x40f968 [ 3006.111214][T16549] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf fa 00 4c 00 31 c0 e8 43 25 ff ff 31 ff e8 8c 21 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 2c 66 00 [ 3006.130832][T16549] RSP: 002b:00007fffa03b55a0 EFLAGS: 00010246 [ 3006.136898][T16549] RAX: 000000006dc91f3c RBX: 000000002622aa82 RCX: 0000001b31720000 [ 3006.144877][T16549] RDX: 0000000000000000 RSI: 0000000000001f3c RDI: ffffffff6dc91f3c [ 3006.152840][T16549] RBP: 000000000000000b R08: 000000006dc91f3c R09: 000000006dc91f40 [ 3006.160882][T16549] R10: 00007fffa03b5740 R11: 0000000000000246 R12: 000000000075bfa8 [ 3006.168884][T16549] R13: 0000000080000000 R14: 00007f00bedb5008 R15: 000000000000000b [ 3006.178628][T16549] memory: usage 307200kB, limit 307200kB, failcnt 1828 [ 3006.185510][T16549] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3006.192723][T16549] Memory cgroup stats for /syz0: [ 3006.192870][T16549] anon 282390528 [ 3006.192870][T16549] file 0 [ 3006.192870][T16549] kernel_stack 2801664 [ 3006.192870][T16549] slab 5386240 [ 3006.192870][T16549] sock 0 [ 3006.192870][T16549] shmem 81920 [ 3006.192870][T16549] file_mapped 0 [ 3006.192870][T16549] file_dirty 0 [ 3006.192870][T16549] file_writeback 0 [ 3006.192870][T16549] anon_thp 262144000 [ 3006.192870][T16549] inactive_anon 135168 [ 3006.192870][T16549] active_anon 282394624 [ 3006.192870][T16549] inactive_file 12288 [ 3006.192870][T16549] active_file 53248 [ 3006.192870][T16549] unevictable 0 [ 3006.192870][T16549] slab_reclaimable 946176 [ 3006.192870][T16549] slab_unreclaimable 4440064 [ 3006.192870][T16549] pgfault 255024 [ 3006.192870][T16549] pgmajfault 2046 [ 3006.192870][T16549] workingset_refault 0 [ 3006.192870][T16549] workingset_activate 0 [ 3006.192870][T16549] workingset_nodereclaim 0 [ 3006.192870][T16549] pgrefill 3762 [ 3006.192870][T16549] pgscan 5086 [ 3006.192870][T16549] pgsteal 3288 [ 3006.286833][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.286870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.299129][T16549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16516,uid=0 [ 3006.314648][T16549] Memory cgroup out of memory: Killed process 16516 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3006.336422][ T1067] oom_reaper: reaped process 16516 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 23:46:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:52 executing program 3: 23:46:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:52 executing program 5: 23:46:52 executing program 1: 23:46:52 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:46:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3006.548413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.554257][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='_', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvfrom$inet(r2, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0xfffffffffffffe33) 23:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xd3) [ 3006.628437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.634275][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:46:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xd3) 23:46:52 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xd3) 23:46:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:46:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xd3) 23:46:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:53 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:46:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xd3) [ 3007.462469][T16764] kvm: pic: level sensitive irq not supported [ 3007.463385][T16764] picdev_read: 55 callbacks suppressed [ 3007.463391][T16764] kvm: pic: non byte read [ 3007.522791][T16764] picdev_write: 55 callbacks suppressed [ 3007.522795][T16764] kvm: pic: non byte write [ 3007.552580][T16764] kvm: pic: level sensitive irq not supported [ 3007.552706][T16764] kvm: pic: non byte read 23:46:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3007.589200][T16764] kvm: pic: non byte write [ 3007.593860][T16764] kvm: pic: single mode not supported [ 3007.593965][T16764] kvm: pic: non byte read [ 3007.609185][T16764] kvm: pic: non byte write [ 3007.614390][T16764] kvm: pic: single mode not supported [ 3007.614496][T16764] kvm: pic: non byte read [ 3007.669412][T16764] kvm: pic: non byte write [ 3007.682292][T16764] kvm: pic: single mode not supported [ 3007.682403][T16764] kvm: pic: non byte read [ 3007.705267][T16764] kvm: pic: non byte write [ 3007.732493][T16764] kvm: pic: single mode not supported [ 3007.732652][T16764] kvm: pic: non byte read [ 3007.759444][T16764] kvm: pic: non byte write [ 3007.764440][T16764] kvm: pic: single mode not supported [ 3007.764559][T16764] kvm: pic: non byte read [ 3007.777598][T16764] kvm: pic: non byte write [ 3007.786625][T16764] kvm: pic: single mode not supported [ 3007.786803][T16764] kvm: pic: non byte read [ 3007.807982][T16764] kvm: pic: non byte write [ 3007.821057][T16764] kvm: pic: single mode not supported [ 3007.821174][T16764] kvm: pic: non byte read [ 3007.848542][T16764] kvm: pic: non byte write [ 3007.856311][T16764] kvm: pic: single mode not supported [ 3007.856502][T16764] kvm: pic: non byte read [ 3007.867008][T16764] kvm: pic: non byte write [ 3007.872091][T16764] kvm: pic: single mode not supported [ 3007.872435][T16764] kvm: pic: single mode not supported 23:46:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:55 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:55 executing program 3: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) 23:46:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:46:55 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 23:46:56 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0), 0x1000) 23:46:56 executing program 3: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) 23:46:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:56 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:56 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xaffb6f03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x956, 0x404800) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8}, 0x8) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x1a3, 0x9, &(0x7f0000000180)}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000780)="316fc3cef11414de130258ece18f5dcd3d067f7db127ae62ae75eba16f28083a4f06055e1e1627ccd7b3b3c119236465570773166d5c44c83b94bddd05386dc10b545d19261822d0051098720b4d1367053deddb980f3c762588296cc3a5f1653784f9dabaff5a7233608839acb899ba9cfe5a966332c172da", 0x79}, {&(0x7f0000000800)="effcc9912b7c63e8c9f3568b804958dac37b7cac267272ccb374464fae8e15eb21d9ae58928fd4bbe8161eab6a5f65ded994d0ec3d3cd6b09c6639cd626d434d502017129052fa52988079d03bf4fc09918775d2632d4d675071d87f5b4b1dafa9ff45bab7766204ab0c86435ead7e9ced4477c17a97172b1431d1e602ced6aea342e715b3497a86d8c33779870cd2cf39d02480a40fbc38333e9b7a70d93d", 0x9f}, {&(0x7f00000008c0)="b943e0d035cefdc7883b5c155155b7644bc4e2078afaf3c1a939711cbe2f478677fb842899e7ecd88e35cb50e297e73a9b260a292fd48862bb34f40ddde9550f594f7e8b5cea952fed12b462616841be", 0x50}, {&(0x7f0000000940)="559d05f5aba1bf0a7f0ccab74bd9e831eafc8149dece7c53932856009b726860bb4d797699a9014a936e0c8ec0d461d522584b3ab78b53744551256449027d1644f19a4764bc362670176c918974b3a8be11977c387e9e6fb993f7c5af6d98a9316246fa2d0b485d46caa9e7d82e047a08e21737113c648bc370b69794768e88f3ccdd87e318e8bf2a0c99ef6e847a9c08a762575031", 0x96}], 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x101002) keyctl$unlink(0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 23:46:56 executing program 3: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) [ 3007.908947][T16764] kvm: pic: level sensitive irq not supported [ 3010.710772][ C1] net_ratelimit: 16 callbacks suppressed [ 3010.710783][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.728323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.790744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.796529][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3011.751288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3011.757208][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3011.911358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3011.917142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.471717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.477508][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:46:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:46:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:59 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) 23:46:59 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:59 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xaffb6f03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x956, 0x404800) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8}, 0x8) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x1a3, 0x9, &(0x7f0000000180)}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000780)="316fc3cef11414de130258ece18f5dcd3d067f7db127ae62ae75eba16f28083a4f06055e1e1627ccd7b3b3c119236465570773166d5c44c83b94bddd05386dc10b545d19261822d0051098720b4d1367053deddb980f3c762588296cc3a5f1653784f9dabaff5a7233608839acb899ba9cfe5a966332c172da", 0x79}, {&(0x7f0000000800)="effcc9912b7c63e8c9f3568b804958dac37b7cac267272ccb374464fae8e15eb21d9ae58928fd4bbe8161eab6a5f65ded994d0ec3d3cd6b09c6639cd626d434d502017129052fa52988079d03bf4fc09918775d2632d4d675071d87f5b4b1dafa9ff45bab7766204ab0c86435ead7e9ced4477c17a97172b1431d1e602ced6aea342e715b3497a86d8c33779870cd2cf39d02480a40fbc38333e9b7a70d93d", 0x9f}, {&(0x7f00000008c0)="b943e0d035cefdc7883b5c155155b7644bc4e2078afaf3c1a939711cbe2f478677fb842899e7ecd88e35cb50e297e73a9b260a292fd48862bb34f40ddde9550f594f7e8b5cea952fed12b462616841be", 0x50}, {&(0x7f0000000940)="559d05f5aba1bf0a7f0ccab74bd9e831eafc8149dece7c53932856009b726860bb4d797699a9014a936e0c8ec0d461d522584b3ab78b53744551256449027d1644f19a4764bc362670176c918974b3a8be11977c387e9e6fb993f7c5af6d98a9316246fa2d0b485d46caa9e7d82e047a08e21737113c648bc370b69794768e88f3ccdd87e318e8bf2a0c99ef6e847a9c08a762575031", 0x96}], 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x101002) keyctl$unlink(0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 23:46:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8}]}, 0x24}}, 0x0) 23:46:59 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) 23:46:59 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0xf0ffff) r1 = dup(0xffffffffffffffff) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='/@.\x00', 0x4, 0x0) 23:46:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:46:59 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:46:59 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd3) 23:46:59 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xaffb6f03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x956, 0x404800) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8}, 0x8) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x1a3, 0x9, &(0x7f0000000180)}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000780)="316fc3cef11414de130258ece18f5dcd3d067f7db127ae62ae75eba16f28083a4f06055e1e1627ccd7b3b3c119236465570773166d5c44c83b94bddd05386dc10b545d19261822d0051098720b4d1367053deddb980f3c762588296cc3a5f1653784f9dabaff5a7233608839acb899ba9cfe5a966332c172da", 0x79}, {&(0x7f0000000800)="effcc9912b7c63e8c9f3568b804958dac37b7cac267272ccb374464fae8e15eb21d9ae58928fd4bbe8161eab6a5f65ded994d0ec3d3cd6b09c6639cd626d434d502017129052fa52988079d03bf4fc09918775d2632d4d675071d87f5b4b1dafa9ff45bab7766204ab0c86435ead7e9ced4477c17a97172b1431d1e602ced6aea342e715b3497a86d8c33779870cd2cf39d02480a40fbc38333e9b7a70d93d", 0x9f}, {&(0x7f00000008c0)="b943e0d035cefdc7883b5c155155b7644bc4e2078afaf3c1a939711cbe2f478677fb842899e7ecd88e35cb50e297e73a9b260a292fd48862bb34f40ddde9550f594f7e8b5cea952fed12b462616841be", 0x50}, {&(0x7f0000000940)="559d05f5aba1bf0a7f0ccab74bd9e831eafc8149dece7c53932856009b726860bb4d797699a9014a936e0c8ec0d461d522584b3ab78b53744551256449027d1644f19a4764bc362670176c918974b3a8be11977c387e9e6fb993f7c5af6d98a9316246fa2d0b485d46caa9e7d82e047a08e21737113c648bc370b69794768e88f3ccdd87e318e8bf2a0c99ef6e847a9c08a762575031", 0x96}], 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x101002) keyctl$unlink(0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 3015.913570][ C0] net_ratelimit: 14 callbacks suppressed [ 3015.913577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3015.925044][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3016.073661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3016.079467][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:02 executing program 5: syz_emit_ethernet(0x11e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "7660c1", 0xe8, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x0, 0x0, 0x60], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @remote, @remote, [{0x0, 0x1, "feb631f16eb00217146adb28"}, {0x0, 0xb, "71de61cdec0d0a50a0cd27c8c3846958d5842a186a56ae3fb8e35eb7aef4a6f478e3832417320ec7c976f3ceba2282616f1a9a7cd4de5666b59f81ce96bbfd3a91ca4a3a723f80dbb64f14d052234a0f9fff8ade783619a0203168f2f8"}, {0x0, 0xa, "36800518da69c3f032647a6d741507fb9df034ea17695ef526186fe629703f95549a4a4e885d04bf02a2e1aaab77864ff6c63cfd7b643c673b7d3f8b7f3df99bfc28a8acfb86879b4a154845e6893a2632"}]}}}}}}, 0x0) 23:47:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x0) 23:47:02 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "1b5200", 0x10, 0xffffff11, 0x0, @remote, @ipv4={[], [], @local}, {[@dstopts], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 23:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$unix(r1, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:47:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "1b5200", 0x10, 0xffffff11, 0x0, @remote, @ipv4={[], [], @local}, {[@dstopts], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 23:47:02 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:02 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xc05eb68) clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) unlink(&(0x7f0000000480)='./file0\x00') 23:47:02 executing program 1: getrandom(&(0x7f0000000000)=""/214, 0xd6, 0x3) [ 3016.633916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3016.639708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3016.954133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3016.959924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3017.034182][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.039970][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000000100), 0x8) socket$netlink(0x10, 0x3, 0x0) 23:47:05 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x200040, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') socket$inet(0x10, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 23:47:05 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) lseek(r1, 0x20400001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007b9000/0x2000)=nil) 23:47:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:05 executing program 1: 23:47:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) lseek(r1, 0x20400001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007b9000/0x2000)=nil) 23:47:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) lseek(r1, 0x20400001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007b9000/0x2000)=nil) 23:47:05 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:05 executing program 1: [ 3021.116417][ C1] net_ratelimit: 16 callbacks suppressed [ 3021.116426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.127862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3021.196401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.202261][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3022.156958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3022.162754][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3022.317029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3022.322852][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:08 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:08 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fffffff}], 0x1, 0x0) 23:47:08 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) 23:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) lseek(r1, 0x20400001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007b9000/0x2000)=nil) 23:47:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:08 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) 23:47:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:08 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3022.877331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3022.883163][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) lseek(r1, 0x20400001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007b9000/0x2000)=nil) 23:47:08 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) 23:47:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:11 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) 23:47:11 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:11 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x14, r1, 0x391}, 0x14}}, 0x0) gettid() ptrace(0x10, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x13) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = getpid() r4 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r4, 0x402, 0x13) fcntl$setownex(r4, 0xf, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="000426bd7000fddbdf2525000000100001006e657464657673696d000000100002006e657464657673696d30000008008b00", @ANYRES32, @ANYBLOB="100001006e657464657673696d000000100002006e657464727673696d30000008008c0002000000100001006e657464657673696d0000001000020008008b00", @ANYRES32=r2, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673696d30000008008c0003000000080001007063690014000200303030303a30303a31302e300000000008008b00", @ANYRES32=r3, @ANYBLOB="080001007063690013000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x4e82e0b60983948f}, 0x4008050) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r6}, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x40000, @remote, 0x1}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r9, 0x5608) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) r13 = dup3(r5, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="b7d043a95b943215d52abc77bc3cdb1bed1e6c958d6fbf5e451cda1bb1a6b64e42401bdfad7e3bf26fa1d14f8e21ab0dc61efdf7cc850e8a99dc5997f46f64ac647179d6c82b733240bc73e2ff671ae7421eddc78920bb06435a7f787f95ba779832013e572e5f4dbb3c104c7081b75904aea5c33b3874ccda104d124139c4efbb6de946771ab2252692232efd7662d1ecd79e3b85810fb15d351e4a4b193f29285b750cab2772bf4cc08deef66e8b92616f"], 0x1}}, 0x4184) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140023003e00000327bd7000fedbdf250a000000"], 0x14}}, 0x40) 23:47:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, @fd=r1}]}, 0x1c}}, 0x0) 23:47:11 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r4, 0x0, 0x0) 23:47:11 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x200040, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') socket$inet(0x10, 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 23:47:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:11 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x14, r1, 0x391}, 0x14}}, 0x0) gettid() ptrace(0x10, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x13) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = getpid() r4 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r4, 0x402, 0x13) fcntl$setownex(r4, 0xf, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="000426bd7000fddbdf2525000000100001006e657464657673696d000000100002006e657464657673696d30000008008b00", @ANYRES32, @ANYBLOB="100001006e657464657673696d000000100002006e657464727673696d30000008008c0002000000100001006e657464657673696d0000001000020008008b00", @ANYRES32=r2, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673696d30000008008c0003000000080001007063690014000200303030303a30303a31302e300000000008008b00", @ANYRES32=r3, @ANYBLOB="080001007063690013000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x4e82e0b60983948f}, 0x4008050) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r6}, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x40000, @remote, 0x1}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r9, 0x5608) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) r13 = dup3(r5, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="b7d043a95b943215d52abc77bc3cdb1bed1e6c958d6fbf5e451cda1bb1a6b64e42401bdfad7e3bf26fa1d14f8e21ab0dc61efdf7cc850e8a99dc5997f46f64ac647179d6c82b733240bc73e2ff671ae7421eddc78920bb06435a7f787f95ba779832013e572e5f4dbb3c104c7081b75904aea5c33b3874ccda104d124139c4efbb6de946771ab2252692232efd7662d1ecd79e3b85810fb15d351e4a4b193f29285b750cab2772bf4cc08deef66e8b92616f"], 0x1}}, 0x4184) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140023003e00000327bd7000fedbdf250a000000"], 0x14}}, 0x40) 23:47:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:12 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:12 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) 23:47:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$KDSIGACCEPT(r1, 0x5408, 0x0) [ 3026.319190][ C0] net_ratelimit: 14 callbacks suppressed [ 3026.319201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.319229][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.479327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.479418][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.039580][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.045376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.359773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.365561][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.439757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.445572][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3028.530472][T24712] tipc: TX() has been purged, node left! 23:47:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:14 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() r4 = socket(0x2, 0x8002, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) 23:47:14 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:14 executing program 3: 23:47:14 executing program 5: 23:47:14 executing program 3: 23:47:15 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() socket(0x2, 0x8002, 0x0) 23:47:15 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:15 executing program 3: 23:47:15 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) getgid() [ 3029.451543][T18678] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3029.514254][T18678] CPU: 1 PID: 18678 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3029.523002][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3029.533117][T18678] Call Trace: [ 3029.536495][T18678] dump_stack+0x11d/0x181 [ 3029.540912][T18678] dump_header+0xaa/0x39c [ 3029.545261][T18678] oom_kill_process.cold+0x10/0x15 [ 3029.550424][T18678] out_of_memory+0x231/0xa60 [ 3029.555046][T18678] ? __rcu_read_unlock+0x66/0x3d0 [ 3029.560177][T18678] mem_cgroup_out_of_memory+0x128/0x150 [ 3029.565758][T18678] try_charge+0xb6c/0xbf0 [ 3029.570183][T18678] ? memcg_to_vmpressure+0x1b/0x50 [ 3029.575315][T18678] ? setup_fault_attr+0x50/0x120 [ 3029.580310][T18678] ? __rcu_read_unlock+0x66/0x3d0 [ 3029.585408][T18678] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3029.590889][T18678] __memcg_kmem_charge+0xcf/0x1b0 [ 3029.595939][T18678] copy_process+0x11d2/0x3c40 [ 3029.600701][T18678] ? record_times+0x16/0x90 [ 3029.605307][T18678] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3029.611464][T18678] _do_fork+0xfe/0x7a0 [ 3029.615545][T18678] ? cgroup_file_notify+0xff/0x130 [ 3029.620677][T18678] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3029.626845][T18678] __x64_sys_clone+0x130/0x170 [ 3029.631666][T18678] do_syscall_64+0xcc/0x3a0 [ 3029.636192][T18678] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3029.642088][T18678] RIP: 0033:0x45d2e9 23:47:15 executing program 3: [ 3029.646001][T18678] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3029.665614][T18678] RSP: 002b:00007fffa03b5538 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3029.674177][T18678] RAX: ffffffffffffffda RBX: 00007f00bcdb4700 RCX: 000000000045d2e9 [ 3029.682186][T18678] RDX: 00007f00bcdb49d0 RSI: 00007f00bcdb3db0 RDI: 00000000003d0f00 [ 3029.690232][T18678] RBP: 00007fffa03b5750 R08: 00007f00bcdb4700 R09: 00007f00bcdb4700 [ 3029.698219][T18678] R10: 00007f00bcdb49d0 R11: 0000000000000202 R12: 0000000000000000 [ 3029.706247][T18678] R13: 00007fffa03b55ef R14: 00007f00bcdb49c0 R15: 000000000075bf2c [ 3029.741041][T18678] memory: usage 307200kB, limit 307200kB, failcnt 1845 [ 3029.769623][T18678] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3030.051294][T18678] Memory cgroup stats for /syz0: [ 3030.051472][T18678] anon 282320896 [ 3030.051472][T18678] file 0 [ 3030.051472][T18678] kernel_stack 2801664 [ 3030.051472][T18678] slab 5386240 [ 3030.051472][T18678] sock 0 [ 3030.051472][T18678] shmem 81920 [ 3030.051472][T18678] file_mapped 0 [ 3030.051472][T18678] file_dirty 0 [ 3030.051472][T18678] file_writeback 0 [ 3030.051472][T18678] anon_thp 262144000 [ 3030.051472][T18678] inactive_anon 135168 [ 3030.051472][T18678] active_anon 282324992 [ 3030.051472][T18678] inactive_file 12288 [ 3030.051472][T18678] active_file 53248 [ 3030.051472][T18678] unevictable 0 [ 3030.051472][T18678] slab_reclaimable 946176 [ 3030.051472][T18678] slab_unreclaimable 4440064 [ 3030.051472][T18678] pgfault 256509 [ 3030.051472][T18678] pgmajfault 2046 [ 3030.051472][T18678] workingset_refault 0 [ 3030.051472][T18678] workingset_activate 0 [ 3030.051472][T18678] workingset_nodereclaim 0 [ 3030.051472][T18678] pgrefill 3795 [ 3030.051472][T18678] pgscan 5120 [ 3030.051472][T18678] pgsteal 3288 [ 3030.604536][T18678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18542,uid=0 [ 3030.623704][T24712] device bridge_slave_1 left promiscuous mode [ 3030.629971][T24712] bridge0: port 2(bridge_slave_1) entered disabled state [ 3030.702356][T24712] device bridge_slave_0 left promiscuous mode [ 3030.714910][T24712] bridge0: port 1(bridge_slave_0) entered disabled state [ 3030.734414][T18678] Memory cgroup out of memory: Killed process 18542 (syz-executor.0) total-vm:72584kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3031.602057][ C0] net_ratelimit: 16 callbacks suppressed [ 3031.602067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.613543][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:18 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000040)=0x1, 0x4) 23:47:18 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:18 executing program 3: 23:47:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3032.562517][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3032.568351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3032.722586][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3032.728394][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.282918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.288709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.683103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.688938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3034.117164][T24712] device hsr_slave_0 left promiscuous mode [ 3034.164785][T24712] device hsr_slave_1 left promiscuous mode [ 3034.216689][T24712] team0 (unregistering): Port device team_slave_1 removed [ 3034.257277][T24712] team0 (unregistering): Port device team_slave_0 removed [ 3034.298762][T24712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3034.387531][T24712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3034.508536][T24712] bond0 (unregistering): Released all slaves [ 3034.641844][T18733] IPVS: ftp: loaded support on port[0] = 21 [ 3034.889701][T18733] chnl_net:caif_netlink_parms(): no params data found [ 3035.042903][T18733] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.070637][T18733] bridge0: port 1(bridge_slave_0) entered disabled state [ 3035.099363][T18733] device bridge_slave_0 entered promiscuous mode [ 3035.129460][T18733] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.156039][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 3035.185015][T18733] device bridge_slave_1 entered promiscuous mode [ 3035.256294][T18733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3035.344481][T18733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3035.411520][T18733] team0: Port device team_slave_0 added [ 3035.467496][T18733] team0: Port device team_slave_1 added [ 3035.556190][T18733] device hsr_slave_0 entered promiscuous mode [ 3035.594540][T18733] device hsr_slave_1 entered promiscuous mode [ 3035.631205][T18733] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.638350][T18733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3035.645749][T18733] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.652819][T18733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3035.745335][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 3035.753617][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 3035.849464][T18733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3035.882512][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3035.890650][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3035.926671][T18733] 8021q: adding VLAN 0 to HW filter on device team0 [ 3035.946211][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3035.965289][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3035.973789][T12113] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.980862][T12113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3036.055436][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3036.064238][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3036.094850][T18655] bridge0: port 2(bridge_slave_1) entered blocking state [ 3036.102055][T18655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3036.135061][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3036.164515][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3036.173747][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3036.225306][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3036.255417][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3036.287266][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3036.313936][T18733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3036.347245][T18733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3036.370625][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3036.388766][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3036.410943][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3036.436007][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3036.455197][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3036.495443][T18733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3036.504122][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3036.528823][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3036.544320][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3036.654698][ C0] net_ratelimit: 10 callbacks suppressed [ 3036.654710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.666170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3036.724742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.730552][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3036.774788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.780576][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007841dfffd946f610500020f81001f038b0502000800080006004000ff7e", 0x24}], 0x1}, 0x0) 23:47:22 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) close(r3) 23:47:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x30, 0x1, 0x1, 0x7, 0x3, 0x0, 0x1}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff060000000a000000450000002500000019000a000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) close(r2) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) tkill(0x0, 0x0) 23:47:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3036.894830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.894858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.900611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3036.906365][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:23 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000000c0)={{}, {0x18, 0x1, 0x2}}, 0x3c) 23:47:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) rmdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:47:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:23 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:23 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) [ 3037.732849][ T26] audit: type=1804 audit(1576799243.709:20800): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir380641572/syzkaller.KBupu0/2/bus" dev="sda1" ino=16817 res=1 23:47:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) rmdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:47:24 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) 23:47:24 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3038.493257][ T26] audit: type=1804 audit(1576799244.469:20801): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir380641572/syzkaller.KBupu0/3/bus" dev="sda1" ino=16579 res=1 23:47:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:25 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x400000000018, 0x3, 0x3a) 23:47:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:25 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) rmdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:47:25 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:26 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 23:47:26 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:26 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) rmdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:47:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:26 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02c180ffffffff"], 0x1) [ 3040.547296][ T26] audit: type=1804 audit(1576799246.517:20802): pid=19050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir380641572/syzkaller.KBupu0/5/bus" dev="sda1" ino=16737 res=1 [ 3042.007539][ C0] net_ratelimit: 20 callbacks suppressed [ 3042.007546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.018997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3042.968073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.973856][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:29 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:29 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x8000fffffffe) 23:47:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:29 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x101, 0x1) 23:47:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) [ 3043.128162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3043.133960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3043.138143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3043.145445][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:29 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="4414", 0x2}], 0x1, 0x0) [ 3043.202189][T19080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:47:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:29 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:29 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000100)) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) [ 3043.688444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3043.694285][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c9235", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:32 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="fb18bbdf3f0000000000"], 0x1c, 0x0}, 0x0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:32 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:32 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:32 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) socket$inet6(0x18, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:32 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) [ 3047.130270][ C0] net_ratelimit: 11 callbacks suppressed [ 3047.130280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.141767][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3047.290364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.290455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.296157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3047.301906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3047.850641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.856434][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.250848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.256702][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c9235", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:35 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) socket$inet6(0x18, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:35 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x0, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:35 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) socket$inet6(0x18, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:35 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(r0, 0x0, &(0x7f0000000100)) 23:47:35 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x0, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c9235", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:38 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(r0, 0x0, &(0x7f0000000100)) 23:47:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:38 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x0, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) [ 3052.413014][ C0] net_ratelimit: 18 callbacks suppressed [ 3052.413024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3052.424552][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:38 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x277, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(r0, 0x0, &(0x7f0000000100)) 23:47:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:38 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:38 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) accept(r1, 0x0, &(0x7f0000000100)) [ 3053.373531][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3053.379333][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3053.533619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3053.533638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3053.539403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.093986][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.099777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.494174][ C0] protocol 88fb is buggy, dev hsr_slave_0 23:47:41 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(r0, r0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a713", 0xba}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 23:47:41 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:41 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000}) 23:47:41 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:41 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 23:47:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:42 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) accept(r1, 0x0, &(0x7f0000000100)) 23:47:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 3057.545755][ C0] net_ratelimit: 11 callbacks suppressed [ 3057.545764][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.557212][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3057.695820][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.695840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3057.701599][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.256101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.261945][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a713", 0xba}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:44 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) accept(r1, 0x0, &(0x7f0000000100)) 23:47:44 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 23:47:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 3058.656272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.662069][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)) 23:47:44 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) accept(r1, 0x0, &(0x7f0000000100)) 23:47:44 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)) 23:47:45 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) accept(r1, 0x0, &(0x7f0000000100)) [ 3059.616841][ C0] protocol 88fb is buggy, dev hsr_slave_0 23:47:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a713", 0xba}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)) 23:47:47 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) dup2(r0, r0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:47 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 23:47:47 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) dup2(r0, r0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000800)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000840)=0x6) 23:47:48 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:48 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) dup2(r0, r0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 23:47:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:48 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) write$binfmt_elf32(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="7220cc22aec049f37f5e42da69a5c66371998fafdf4c1bc6438806bddccdc17fcc03418efd8309acea7e2bb3c8c26c9fc855256158f52e613a6a4b7c0feb52b132671d77bc182a5942fac0af8af2cd5095448c0a7eae18aedb14397a0d8d8687a260d93b7563b62eb475d780"], 0x6c) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x811, 0x0, 0x140) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffeaf) [ 3062.818463][ C0] net_ratelimit: 17 callbacks suppressed [ 3062.818472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.830072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3063.408811][ T111] tipc: TX() has been purged, node left! [ 3063.778990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3063.784859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3063.939030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3063.939158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3063.944821][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3063.950547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.129729][ T111] IPVS: stopping backup sync thread 11175 ... [ 3064.136475][ T111] device bridge_slave_1 left promiscuous mode [ 3064.143021][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3064.219919][ T111] device bridge_slave_0 left promiscuous mode [ 3064.226131][ T111] bridge0: port 1(bridge_slave_0) entered disabled state 23:47:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d", 0xd9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:50 executing program 1: r0 = socket$inet6(0x18, 0x0, 0x0) r1 = dup2(r0, r0) accept(r1, 0x0, 0x0) 23:47:50 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:50 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) write$binfmt_elf32(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="7220cc22aec049f37f5e42da69a5c66371998fafdf4c1bc6438806bddccdc17fcc03418efd8309acea7e2bb3c8c26c9fc855256158f52e613a6a4b7c0feb52b132671d77bc182a5942fac0af8af2cd5095448c0a7eae18aedb14397a0d8d8687a260d93b7563b62eb475d780"], 0x6c) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x811, 0x0, 0x140) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffeaf) 23:47:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3064.899546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.905478][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.995369][ T111] bond1 (unregistering): Released all slaves 23:47:51 executing program 1: socket$inet(0x10, 0x0, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) write$binfmt_elf32(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="7220cc22aec049f37f5e42da69a5c66371998fafdf4c1bc6438806bddccdc17fcc03418efd8309acea7e2bb3c8c26c9fc855256158f52e613a6a4b7c0feb52b132671d77bc182a5942fac0af8af2cd5095448c0a7eae18aedb14397a0d8d8687a260d93b7563b62eb475d780"], 0x6c) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x811, 0x0, 0x140) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffeaf) [ 3065.061605][ T3532] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3065.089916][ T111] device hsr_slave_0 left promiscuous mode [ 3065.125275][ T3532] CPU: 1 PID: 3532 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3065.133967][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.144029][ T3532] Call Trace: [ 3065.147341][ T3532] dump_stack+0x11d/0x181 [ 3065.151716][ T3532] dump_header+0xaa/0x39c [ 3065.156065][ T3532] oom_kill_process.cold+0x10/0x15 [ 3065.161255][ T3532] out_of_memory+0x231/0xa60 [ 3065.165865][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3065.171035][ T3532] mem_cgroup_out_of_memory+0x128/0x150 [ 3065.176603][ T3532] try_charge+0xb6c/0xbf0 [ 3065.180988][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3065.186033][ T3532] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3065.191518][ T3532] __memcg_kmem_charge+0xcf/0x1b0 [ 3065.196582][ T3532] __alloc_pages_nodemask+0x26c/0x310 [ 3065.201983][ T3532] alloc_pages_current+0xd1/0x170 [ 3065.207168][ T3532] get_zeroed_page+0x14/0x50 [ 3065.211773][ T3532] __pud_alloc+0x48/0x250 [ 3065.216118][ T3532] ? preempt_count_add+0x6f/0xb0 [ 3065.221075][ T3532] pud_alloc+0xc3/0x100 [ 3065.225340][ T3532] copy_page_range+0x270/0x19b0 [ 3065.230335][ T3532] ? __read_once_size.constprop.0+0x12/0x20 [ 3065.236252][ T3532] ? __read_once_size.constprop.0+0x12/0x20 [ 3065.242201][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3065.247282][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3065.252348][ T3532] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3065.257893][ T3532] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3065.263642][ T3532] ? vma_gap_callbacks_rotate+0x126/0x190 [ 3065.269383][ T3532] ? __rb_insert_augmented+0x11a/0x370 [ 3065.274860][ T3532] ? vm_get_page_prot+0x90/0x90 [ 3065.279736][ T3532] ? __vma_link_rb+0x3f4/0x440 [ 3065.284527][ T3532] dup_mm+0x74a/0xba0 [ 3065.289015][ T3532] copy_process+0x3138/0x3c40 [ 3065.293700][ T3532] ? do_wp_page+0x19f/0xeb0 [ 3065.298315][ T3532] _do_fork+0xfe/0x7a0 [ 3065.302408][ T3532] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3065.308316][ T3532] ? __read_once_size+0x5a/0xe0 [ 3065.313203][ T3532] __x64_sys_clone+0x130/0x170 [ 3065.318113][ T3532] do_syscall_64+0xcc/0x3a0 23:47:51 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3065.322631][ T3532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3065.328519][ T3532] RIP: 0033:0x458eea [ 3065.332426][ T3532] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3065.352221][ T3532] RSP: 002b:00007fffa03b57d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3065.360754][ T3532] RAX: ffffffffffffffda RBX: 00007fffa03b57d0 RCX: 0000000000458eea [ 3065.368741][ T3532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3065.376713][ T3532] RBP: 00007fffa03b5810 R08: 0000000000000001 R09: 0000000001fd5940 [ 3065.384818][ T3532] R10: 0000000001fd5c10 R11: 0000000000000246 R12: 0000000000000001 [ 3065.392816][ T3532] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa03b5860 [ 3065.410867][ T111] device hsr_slave_1 left promiscuous mode [ 3065.463048][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3065.493656][ T111] team0 (unregistering): Port device team_slave_0 removed [ 3065.528007][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3065.586015][ T3532] memory: usage 307200kB, limit 307200kB, failcnt 1895 [ 3065.605384][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3065.621841][ T3532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3065.636768][ T3532] Memory cgroup stats for /syz0: [ 3065.637020][ T3532] anon 281194496 [ 3065.637020][ T3532] file 0 [ 3065.637020][ T3532] kernel_stack 2875392 [ 3065.637020][ T3532] slab 5521408 [ 3065.637020][ T3532] sock 0 [ 3065.637020][ T3532] shmem 81920 [ 3065.637020][ T3532] file_mapped 0 [ 3065.637020][ T3532] file_dirty 0 [ 3065.637020][ T3532] file_writeback 0 [ 3065.637020][ T3532] anon_thp 260046848 [ 3065.637020][ T3532] inactive_anon 135168 [ 3065.637020][ T3532] active_anon 281198592 [ 3065.637020][ T3532] inactive_file 12288 [ 3065.637020][ T3532] active_file 0 [ 3065.637020][ T3532] unevictable 0 [ 3065.637020][ T3532] slab_reclaimable 946176 [ 3065.637020][ T3532] slab_unreclaimable 4575232 [ 3065.637020][ T3532] pgfault 258291 [ 3065.637020][ T3532] pgmajfault 2046 [ 3065.637020][ T3532] workingset_refault 0 [ 3065.637020][ T3532] workingset_activate 0 [ 3065.637020][ T3532] workingset_nodereclaim 0 [ 3065.637020][ T3532] pgrefill 4063 [ 3065.637020][ T3532] pgscan 5220 [ 3065.637020][ T3532] pgsteal 3288 23:47:51 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x0, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3065.822195][ T111] bond0 (unregistering): Released all slaves 23:47:51 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "1500"}}}}}}, 0x0) [ 3065.981975][ T3532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19151,uid=0 [ 3066.050184][ T3532] Memory cgroup out of memory: Killed process 19151 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 23:47:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3066.097676][ T1067] oom_reaper: reaped process 19151 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 23:47:52 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x0, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3067.818446][T19662] IPVS: ftp: loaded support on port[0] = 21 [ 3067.868937][T19662] chnl_net:caif_netlink_parms(): no params data found [ 3067.895725][T19662] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.902850][T19662] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.910407][T19662] device bridge_slave_0 entered promiscuous mode [ 3067.917844][T19662] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.924995][T19662] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.932904][T19662] device bridge_slave_1 entered promiscuous mode [ 3067.941160][ C0] net_ratelimit: 8 callbacks suppressed [ 3067.941168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.951034][T19662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3067.952497][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d", 0xd9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:53 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x0, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3067.968942][T19662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3067.987719][T19662] team0: Port device team_slave_0 added [ 3067.994564][T19662] team0: Port device team_slave_1 added [ 3068.056324][T19662] device hsr_slave_0 entered promiscuous mode [ 3068.101222][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3068.101229][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3068.101257][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.107002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.131953][T19662] device hsr_slave_1 entered promiscuous mode [ 3068.161290][T19662] debugfs: Directory 'hsr0' with parent '/' already present! [ 3068.177061][T19662] bridge0: port 2(bridge_slave_1) entered blocking state [ 3068.184171][T19662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3068.191511][T19662] bridge0: port 1(bridge_slave_0) entered blocking state [ 3068.198909][T19662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3068.284274][T19662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3068.295680][T18650] bridge0: port 1(bridge_slave_0) entered disabled state [ 3068.309082][T18650] bridge0: port 2(bridge_slave_1) entered disabled state [ 3068.353269][T19662] 8021q: adding VLAN 0 to HW filter on device team0 [ 3068.360769][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3068.374662][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3068.385718][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3068.397226][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3068.405781][T18654] bridge0: port 1(bridge_slave_0) entered blocking state [ 3068.412931][T18654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3068.432310][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3068.441171][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3068.449892][T18654] bridge0: port 2(bridge_slave_1) entered blocking state [ 3068.456952][T18654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3068.465576][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3068.475958][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3068.487210][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3068.497293][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3068.507983][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3068.518731][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3068.534078][T19662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3068.548433][T19662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3068.555664][T19680] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3068.569141][T19680] CPU: 1 PID: 19680 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3068.577938][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.579834][T19662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3068.588006][T19680] Call Trace: [ 3068.588034][T19680] dump_stack+0x11d/0x181 [ 3068.588059][T19680] dump_header+0xaa/0x39c [ 3068.588167][T19680] oom_kill_process.cold+0x10/0x15 [ 3068.611850][T19680] out_of_memory+0x231/0xa60 [ 3068.616450][T19680] ? __rcu_read_unlock+0x66/0x3d0 [ 3068.621506][T19680] mem_cgroup_out_of_memory+0x128/0x150 [ 3068.627067][T19680] try_charge+0xb6c/0xbf0 [ 3068.631411][T19680] ? __mod_lruvec_state+0x70/0x1e0 [ 3068.636588][T19680] ? __rcu_read_unlock+0x66/0x3d0 [ 3068.641613][T19680] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3068.647072][T19680] __memcg_kmem_charge+0xcf/0x1b0 [ 3068.652116][T19680] copy_process+0x11d2/0x3c40 [ 3068.657067][T19680] _do_fork+0xfe/0x7a0 [ 3068.661238][T19680] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3068.667150][T19680] ? __read_once_size+0x5a/0xe0 [ 3068.672008][T19680] __x64_sys_clone+0x130/0x170 [ 3068.676801][T19680] do_syscall_64+0xcc/0x3a0 [ 3068.681349][T19680] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3068.687246][T19680] RIP: 0033:0x45a919 [ 3068.691145][T19680] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3068.710802][T19680] RSP: 002b:00007f00bcd92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3068.719358][T19680] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a919 [ 3068.727374][T19680] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000010000103 [ 3068.735341][T19680] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 3068.743306][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00bcd936d4 [ 3068.751286][T19680] R13: 00000000004c1007 R14: 00000000004d4d28 R15: 00000000ffffffff [ 3068.759860][T19680] memory: usage 307200kB, limit 307200kB, failcnt 1937 [ 3068.766778][T19680] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3068.773716][T19680] Memory cgroup stats for /syz0: [ 3068.774057][T19680] anon 281182208 [ 3068.774057][T19680] file 0 [ 3068.774057][T19680] kernel_stack 2912256 [ 3068.774057][T19680] slab 5521408 [ 3068.774057][T19680] sock 0 [ 3068.774057][T19680] shmem 81920 [ 3068.774057][T19680] file_mapped 0 [ 3068.774057][T19680] file_dirty 0 [ 3068.774057][T19680] file_writeback 0 [ 3068.774057][T19680] anon_thp 260046848 [ 3068.774057][T19680] inactive_anon 135168 [ 3068.774057][T19680] active_anon 281186304 [ 3068.774057][T19680] inactive_file 12288 [ 3068.774057][T19680] active_file 0 [ 3068.774057][T19680] unevictable 0 [ 3068.774057][T19680] slab_reclaimable 946176 [ 3068.774057][T19680] slab_unreclaimable 4575232 [ 3068.774057][T19680] pgfault 258456 [ 3068.774057][T19680] pgmajfault 2046 [ 3068.774057][T19680] workingset_refault 0 [ 3068.774057][T19680] workingset_activate 0 [ 3068.774057][T19680] workingset_nodereclaim 0 [ 3068.774057][T19680] pgrefill 4198 [ 3068.774057][T19680] pgscan 5286 [ 3068.774057][T19680] pgsteal 3288 [ 3068.868474][T19680] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10432,uid=0 [ 3068.884004][T19680] Memory cgroup out of memory: Killed process 10432 (syz-executor.0) total-vm:72584kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3068.903484][ T1067] oom_reaper: reaped process 10432 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 3068.916262][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3068.932668][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3068.955188][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3068.982960][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3069.015522][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3069.043114][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3069.061800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.067606][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.080606][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3069.091721][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.097520][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.127575][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:47:55 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 23:47:55 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local={0xac, 0x24}}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "1500"}}}}}}, 0x0) 23:47:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:55 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:55 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3070.066038][ T111] tipc: TX() has been purged, node left! [ 3070.993552][ T111] device bridge_slave_1 left promiscuous mode [ 3070.999822][ T111] bridge0: port 2(bridge_slave_1) entered disabled state 23:47:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d", 0xd9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:47:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000100007031dfffd946ff20c0020200a0003000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 23:47:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:57 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3071.064003][ T111] device bridge_slave_0 left promiscuous mode [ 3071.070386][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 3072.443895][ T111] device hsr_slave_0 left promiscuous mode [ 3072.493550][ T111] device hsr_slave_1 left promiscuous mode [ 3072.539954][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3072.551304][ T111] team0 (unregistering): Port device team_slave_0 removed [ 3072.561756][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3072.617178][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3072.705721][ T111] bond0 (unregistering): Released all slaves [ 3072.829054][T19745] IPVS: ftp: loaded support on port[0] = 21 [ 3072.898835][T19745] chnl_net:caif_netlink_parms(): no params data found [ 3072.926410][T19745] bridge0: port 1(bridge_slave_0) entered blocking state [ 3072.934322][T19745] bridge0: port 1(bridge_slave_0) entered disabled state [ 3072.942021][T19745] device bridge_slave_0 entered promiscuous mode [ 3072.983857][T19745] bridge0: port 2(bridge_slave_1) entered blocking state [ 3072.990931][T19745] bridge0: port 2(bridge_slave_1) entered disabled state [ 3073.001917][T19745] device bridge_slave_1 entered promiscuous mode [ 3073.024310][T19745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3073.038695][T19745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3073.063393][T19745] team0: Port device team_slave_0 added [ 3073.070467][T19745] team0: Port device team_slave_1 added [ 3073.146477][T19745] device hsr_slave_0 entered promiscuous mode [ 3073.223900][ C0] net_ratelimit: 20 callbacks suppressed [ 3073.223910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.224265][T19745] device hsr_slave_1 entered promiscuous mode [ 3073.229731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.276755][T19745] debugfs: Directory 'hsr0' with parent '/' already present! [ 3073.304161][T19745] bridge0: port 2(bridge_slave_1) entered blocking state [ 3073.311341][T19745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3073.318675][T19745] bridge0: port 1(bridge_slave_0) entered blocking state [ 3073.325787][T19745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3073.428525][T19749] IPVS: ftp: loaded support on port[0] = 21 [ 3073.433397][T19745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3073.466525][T19745] 8021q: adding VLAN 0 to HW filter on device team0 [ 3073.474868][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3073.483330][T18654] bridge0: port 1(bridge_slave_0) entered disabled state [ 3073.491467][T18654] bridge0: port 2(bridge_slave_1) entered disabled state [ 3073.517370][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3073.526111][T18654] bridge0: port 1(bridge_slave_0) entered blocking state [ 3073.533243][T18654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3073.562445][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3073.571138][T18652] bridge0: port 2(bridge_slave_1) entered blocking state [ 3073.578384][T18652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3073.588362][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3073.597421][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3073.624599][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3073.632858][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3073.641580][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3073.651688][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3073.689412][T19749] chnl_net:caif_netlink_parms(): no params data found [ 3073.706262][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3073.714330][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3073.726163][T19745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3073.758104][T19749] bridge0: port 1(bridge_slave_0) entered blocking state [ 3073.765385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.765430][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.777360][T19749] bridge0: port 1(bridge_slave_0) entered disabled state [ 3073.785258][T19749] device bridge_slave_0 entered promiscuous mode [ 3073.793217][T19749] bridge0: port 2(bridge_slave_1) entered blocking state [ 3073.801101][T19749] bridge0: port 2(bridge_slave_1) entered disabled state [ 3073.809484][T19749] device bridge_slave_1 entered promiscuous mode [ 3073.832022][T19749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3073.843887][T19749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3073.865632][T19749] team0: Port device team_slave_0 added [ 3073.872845][T19749] team0: Port device team_slave_1 added [ 3073.878593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.878624][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:59 executing program 1: 23:47:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:47:59 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x0, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:47:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3073.927433][T19749] device hsr_slave_0 entered promiscuous mode [ 3073.984256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.990288][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.996738][T19749] device hsr_slave_1 entered promiscuous mode [ 3074.024323][T19749] debugfs: Directory 'hsr0' with parent '/' already present! 23:48:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3074.104344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3074.110171][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:00 executing program 1: [ 3074.181804][T19749] 8021q: adding VLAN 0 to HW filter on device bond0 23:48:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3074.250169][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3074.276132][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 23:48:00 executing program 1: [ 3074.302766][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3074.322842][T19749] 8021q: adding VLAN 0 to HW filter on device team0 23:48:00 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x0, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3074.393242][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3074.412445][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3074.453396][T18654] bridge0: port 1(bridge_slave_0) entered blocking state [ 3074.460632][T18654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3074.505694][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3074.528307][T18654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3074.552882][T18654] bridge0: port 2(bridge_slave_1) entered blocking state [ 3074.560180][T18654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3074.576943][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3074.585414][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3074.595261][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3074.605060][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3074.624805][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3074.633402][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3074.643069][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3074.651874][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3074.665013][T19749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3074.690018][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3074.701887][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3074.718589][T19749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3074.817152][T19799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3074.956033][T19801] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000100007031dfffd946ff20c0020200a0003000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 23:48:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:01 executing program 1: 23:48:01 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x0, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:01 executing program 1: [ 3075.177021][T19812] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:48:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:01 executing program 1: 23:48:01 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x0, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11000, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) semget$private(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$team(0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007841dfffd946f610500020f81001f038b0502000800080006004000ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007841dfffd946f610500020f81001f038b0502000800080006004000ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000001c0)=0x75986d6d007f8986) r3 = socket(0x1000000010, 0x400000400080803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0xffffffffffffff27) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x0, 0x400000400080803, 0x0) dup(r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x1000000010, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x400000400080803, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000000540)=@hci, &(0x7f00000005c0)=0x21f) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000004800)) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket(0x0, 0x80001, 0x0) setuid(0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={&(0x7f0000000080), 0xc, &(0x7f0000008340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0001245e87600b967ca786b0dce3036b0140da9d6a51aca1eb7e0a07e55822e0d274b79949f3e5f3266d23373a3a67c1b2448f485fffa899072744c5d2139f10260926cfd8f621f04ca85aba7b5636dbe8facf3b3aeb4b64ad11a23c5dbb6379d47dae1dd37d2b2dc5a5cc41cf5c26394633306b31139f3e"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r9 = socket(0x11, 0x0, 0x0) getsockname$packet(r9, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 23:48:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r4, &(0x7f00000002c0), 0x4cc, 0xfff6) 23:48:03 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x0, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:03 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x0, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:03 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x0, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3078.041987][T19837] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3078.053034][T19837] CPU: 1 PID: 19837 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3078.061979][T19837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3078.072064][T19837] Call Trace: [ 3078.075439][T19837] dump_stack+0x11d/0x181 [ 3078.079791][T19837] dump_header+0xaa/0x39c [ 3078.084314][T19837] oom_kill_process.cold+0x10/0x15 [ 3078.089634][T19837] out_of_memory+0x231/0xa60 [ 3078.094220][T19837] ? __rcu_read_unlock+0x66/0x3d0 [ 3078.099261][T19837] mem_cgroup_out_of_memory+0x128/0x150 [ 3078.104896][T19837] try_charge+0xb6c/0xbf0 [ 3078.109276][T19837] ? memcg_to_vmpressure+0x1b/0x50 [ 3078.114521][T19837] ? setup_fault_attr+0x50/0x120 [ 3078.119474][T19837] ? __rcu_read_unlock+0x66/0x3d0 [ 3078.124527][T19837] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3078.130405][T19837] __memcg_kmem_charge+0xcf/0x1b0 [ 3078.135617][T19837] copy_process+0x11d2/0x3c40 [ 3078.140365][T19837] ? record_times+0x16/0x90 [ 3078.144898][T19837] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3078.150982][T19837] _do_fork+0xfe/0x7a0 [ 3078.155132][T19837] ? cgroup_file_notify+0xff/0x130 [ 3078.160248][T19837] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3078.166467][T19837] __x64_sys_clone+0x130/0x170 [ 3078.171237][T19837] do_syscall_64+0xcc/0x3a0 [ 3078.175840][T19837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3078.181726][T19837] RIP: 0033:0x45d2e9 [ 3078.185787][T19837] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3078.205939][T19837] RSP: 002b:00007fffa03b5538 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3078.214352][T19837] RAX: ffffffffffffffda RBX: 00007f00bcd93700 RCX: 000000000045d2e9 [ 3078.222469][T19837] RDX: 00007f00bcd939d0 RSI: 00007f00bcd92db0 RDI: 00000000003d0f00 [ 3078.230483][T19837] RBP: 00007fffa03b5750 R08: 00007f00bcd93700 R09: 00007f00bcd93700 23:48:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r4, &(0x7f00000002c0), 0x4cc, 0xfff6) [ 3078.238454][T19837] R10: 00007f00bcd939d0 R11: 0000000000000202 R12: 0000000000000000 [ 3078.246466][T19837] R13: 00007fffa03b55ef R14: 00007f00bcd939c0 R15: 000000000075bfd4 [ 3078.256812][T19837] memory: usage 307200kB, limit 307200kB, failcnt 1975 [ 3078.263694][T19837] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3078.270788][ C1] net_ratelimit: 28 callbacks suppressed [ 3078.270805][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.270856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.336499][T19837] Memory cgroup stats for /syz0: [ 3078.336725][T19837] anon 281313280 [ 3078.336725][T19837] file 0 [ 3078.336725][T19837] kernel_stack 2912256 [ 3078.336725][T19837] slab 5521408 [ 3078.336725][T19837] sock 0 [ 3078.336725][T19837] shmem 81920 [ 3078.336725][T19837] file_mapped 0 [ 3078.336725][T19837] file_dirty 0 [ 3078.336725][T19837] file_writeback 0 [ 3078.336725][T19837] anon_thp 260046848 [ 3078.336725][T19837] inactive_anon 135168 [ 3078.336725][T19837] active_anon 281231360 [ 3078.336725][T19837] inactive_file 12288 [ 3078.336725][T19837] active_file 0 [ 3078.336725][T19837] unevictable 0 [ 3078.336725][T19837] slab_reclaimable 946176 [ 3078.336725][T19837] slab_unreclaimable 4575232 [ 3078.336725][T19837] pgfault 259149 [ 3078.336725][T19837] pgmajfault 2046 [ 3078.336725][T19837] workingset_refault 0 [ 3078.336725][T19837] workingset_activate 0 [ 3078.336725][T19837] workingset_nodereclaim 0 [ 3078.336725][T19837] pgrefill 4298 [ 3078.336725][T19837] pgscan 5352 [ 3078.336725][T19837] pgsteal 3288 23:48:04 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x0, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3078.436569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.442406][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.442453][T19837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19826,uid=0 [ 3078.465841][T19837] Memory cgroup out of memory: Killed process 19826 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3078.485213][ T1067] oom_reaper: reaped process 19826 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 3078.506660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.506680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.512479][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.518217][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3079.077755][T19903] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3079.088034][T19903] CPU: 0 PID: 19903 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3079.096779][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.106832][T19903] Call Trace: [ 3079.110131][T19903] dump_stack+0x11d/0x181 [ 3079.114524][T19903] dump_header+0xaa/0x39c [ 3079.118873][T19903] oom_kill_process.cold+0x10/0x15 [ 3079.123992][T19903] out_of_memory+0x231/0xa60 [ 3079.128585][T19903] ? __rcu_read_unlock+0x66/0x3d0 [ 3079.133618][T19903] mem_cgroup_out_of_memory+0x128/0x150 [ 3079.139170][T19903] try_charge+0xb6c/0xbf0 [ 3079.143509][T19903] ? memcg_to_vmpressure+0x1b/0x50 [ 3079.148659][T19903] ? setup_fault_attr+0x50/0x120 [ 3079.153589][T19903] ? __rcu_read_unlock+0x66/0x3d0 [ 3079.158622][T19903] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3079.164165][T19903] __memcg_kmem_charge+0xcf/0x1b0 [ 3079.169245][T19903] copy_process+0x11d2/0x3c40 [ 3079.173939][T19903] ? record_times+0x16/0x90 [ 3079.178464][T19903] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3079.184624][T19903] _do_fork+0xfe/0x7a0 [ 3079.188700][T19903] ? cgroup_file_notify+0xff/0x130 [ 3079.193863][T19903] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3079.199972][T19903] __x64_sys_clone+0x130/0x170 [ 3079.204744][T19903] do_syscall_64+0xcc/0x3a0 [ 3079.209434][T19903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3079.215388][T19903] RIP: 0033:0x45d2e9 [ 3079.219299][T19903] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3079.238910][T19903] RSP: 002b:00007fffa03b5538 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3079.247339][T19903] RAX: ffffffffffffffda RBX: 00007f00bcd93700 RCX: 000000000045d2e9 [ 3079.255301][T19903] RDX: 00007f00bcd939d0 RSI: 00007f00bcd92db0 RDI: 00000000003d0f00 [ 3079.263272][T19903] RBP: 00007fffa03b5750 R08: 00007f00bcd93700 R09: 00007f00bcd93700 [ 3079.271255][T19903] R10: 00007f00bcd939d0 R11: 0000000000000202 R12: 0000000000000000 [ 3079.279332][T19903] R13: 00007fffa03b55ef R14: 00007f00bcd939c0 R15: 000000000075bfd4 [ 3079.287747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.293575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.299832][T19903] memory: usage 307200kB, limit 307200kB, failcnt 2001 [ 3079.309211][T19903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3079.316323][T19903] Memory cgroup stats for /syz0: [ 3079.316561][T19903] anon 281292800 [ 3079.316561][T19903] file 0 [ 3079.316561][T19903] kernel_stack 2912256 [ 3079.316561][T19903] slab 5521408 [ 3079.316561][T19903] sock 0 [ 3079.316561][T19903] shmem 81920 [ 3079.316561][T19903] file_mapped 0 [ 3079.316561][T19903] file_dirty 0 [ 3079.316561][T19903] file_writeback 0 [ 3079.316561][T19903] anon_thp 260046848 [ 3079.316561][T19903] inactive_anon 135168 [ 3079.316561][T19903] active_anon 281296896 [ 3079.316561][T19903] inactive_file 12288 [ 3079.316561][T19903] active_file 0 [ 3079.316561][T19903] unevictable 0 [ 3079.316561][T19903] slab_reclaimable 946176 [ 3079.316561][T19903] slab_unreclaimable 4575232 [ 3079.316561][T19903] pgfault 259248 [ 3079.316561][T19903] pgmajfault 2046 [ 3079.316561][T19903] workingset_refault 0 [ 3079.316561][T19903] workingset_activate 0 [ 3079.316561][T19903] workingset_nodereclaim 0 [ 3079.316561][T19903] pgrefill 4364 [ 3079.316561][T19903] pgscan 5385 [ 3079.316561][T19903] pgsteal 3288 [ 3079.411047][T19903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19891,uid=0 [ 3079.428870][T19903] Memory cgroup out of memory: Killed process 19891 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3079.448717][ T1067] oom_reaper: reaped process 19891 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 23:48:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:06 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x0, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11000, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) semget$private(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$team(0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007841dfffd946f610500020f81001f038b0502000800080006004000ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007841dfffd946f610500020f81001f038b0502000800080006004000ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000001c0)=0x75986d6d007f8986) r3 = socket(0x1000000010, 0x400000400080803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0xffffffffffffff27) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x0, 0x400000400080803, 0x0) dup(r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x1000000010, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x400000400080803, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000000540)=@hci, &(0x7f00000005c0)=0x21f) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000004800)) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket(0x0, 0x80001, 0x0) setuid(0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={&(0x7f0000000080), 0xc, &(0x7f0000008340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0001245e87600b967ca786b0dce3036b0140da9d6a51aca1eb7e0a07e55822e0d274b79949f3e5f3266d23373a3a67c1b2448f485fffa899072744c5d2139f10260926cfd8f621f04ca85aba7b5636dbe8facf3b3aeb4b64ad11a23c5dbb6379d47dae1dd37d2b2dc5a5cc41cf5c26394633306b31139f3e"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r9 = socket(0x11, 0x0, 0x0) getsockname$packet(r9, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 23:48:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 23:48:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:06 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:48:06 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3081.000610][ T26] audit: type=1804 audit(1576799286.956:20803): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir858149878/syzkaller.gtMxmv/10/bus" dev="sda1" ino=17619 res=1 [ 3081.063332][ T26] audit: type=1804 audit(1576799287.016:20804): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir858149878/syzkaller.gtMxmv/10/bus" dev="sda1" ino=17619 res=1 23:48:07 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:07 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 3083.389148][ C0] net_ratelimit: 22 callbacks suppressed [ 3083.389158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.400679][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 23:48:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:09 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:09 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0xe2, 0x15f7, &(0x7f00000003c0)="93", 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 3083.639263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.645090][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x4000000000000a, 0x300) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 23:48:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:10 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x111b80, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xfff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000680)={0x6, 'nr0\x00', {0x7}, 0xfeff}) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x3f, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="30dd605b8bd009457fc846b54505485045207d174671fb9a8c453aa0d57c1c29c470e68f9e5cd7d7886fccf4e4d725f54eb4124f20bd6d24ccdc5d5f156667b632d5031b", 0x44}, {&(0x7f0000000380)="fd73555392de2cf3897d", 0xa, 0x3329}], 0x20000, &(0x7f0000000480)='cpuset.effective_mems\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xdffffffa}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(r6) write$FUSE_LK(r5, &(0x7f0000000180)={0x28, 0x0, 0x8, {{0xffffffff, 0x2, 0x1, r7}}}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fddbdf25010000001000040009000000e100fcff6d08000008000400ba030000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000002c0)={0x80000000, 0x4, 0x10001, 0x2, 0x8, 0xffffffff}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c40), 0x0, 0x0) 23:48:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:10 executing program 3: [ 3084.509735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.515574][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.669763][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.675567][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.749824][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.749904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.666903][T20018] bridge0: port 2(bridge_slave_1) entered disabled state [ 3085.674173][T20018] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:12 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:12 executing program 3: 23:48:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'syzkaller1\x00'}}}}}, 0x34}}, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:12 executing program 3: 23:48:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:13 executing program 3: 23:48:13 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x111b80, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xfff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000680)={0x6, 'nr0\x00', {0x7}, 0xfeff}) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x3f, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="30dd605b8bd009457fc846b54505485045207d174671fb9a8c453aa0d57c1c29c470e68f9e5cd7d7886fccf4e4d725f54eb4124f20bd6d24ccdc5d5f156667b632d5031b", 0x44}, {&(0x7f0000000380)="fd73555392de2cf3897d", 0xa, 0x3329}], 0x20000, &(0x7f0000000480)='cpuset.effective_mems\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xdffffffa}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(r6) write$FUSE_LK(r5, &(0x7f0000000180)={0x28, 0x0, 0x8, {{0xffffffff, 0x2, 0x1, r7}}}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fddbdf25010000001000040009000000e100fcff6d08000008000400ba030000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000002c0)={0x80000000, 0x4, 0x10001, 0x2, 0x8, 0xffffffff}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c40), 0x0, 0x0) 23:48:13 executing program 3: 23:48:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3088.031509][ T111] tipc: TX() has been purged, node left! [ 3088.462233][ T111] device bridge_slave_1 left promiscuous mode [ 3088.468536][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3088.502476][ T111] device bridge_slave_0 left promiscuous mode [ 3088.508718][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 3088.611986][ T111] device hsr_slave_0 left promiscuous mode [ 3088.651897][ T111] device hsr_slave_1 left promiscuous mode [ 3088.699268][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3088.709632][ T111] team0 (unregistering): Port device team_slave_0 removed [ 3088.720054][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3088.756041][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3088.831913][ C0] net_ratelimit: 17 callbacks suppressed [ 3088.831924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.843402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3088.845499][ T111] bond0 (unregistering): Released all slaves [ 3088.912002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.917860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3088.922327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.929389][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.632343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.638129][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:15 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x111b80, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xfff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000680)={0x6, 'nr0\x00', {0x7}, 0xfeff}) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x3f, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="30dd605b8bd009457fc846b54505485045207d174671fb9a8c453aa0d57c1c29c470e68f9e5cd7d7886fccf4e4d725f54eb4124f20bd6d24ccdc5d5f156667b632d5031b", 0x44}, {&(0x7f0000000380)="fd73555392de2cf3897d", 0xa, 0x3329}], 0x20000, &(0x7f0000000480)='cpuset.effective_mems\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xdffffffa}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(r6) write$FUSE_LK(r5, &(0x7f0000000180)={0x28, 0x0, 0x8, {{0xffffffff, 0x2, 0x1, r7}}}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fddbdf25010000001000040009000000e100fcff6d08000008000400ba030000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000002c0)={0x80000000, 0x4, 0x10001, 0x2, 0x8, 0xffffffff}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c40), 0x0, 0x0) 23:48:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x111b80, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xfff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000680)={0x6, 'nr0\x00', {0x7}, 0xfeff}) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x3f, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="30dd605b8bd009457fc846b54505485045207d174671fb9a8c453aa0d57c1c29c470e68f9e5cd7d7886fccf4e4d725f54eb4124f20bd6d24ccdc5d5f156667b632d5031b", 0x44}, {&(0x7f0000000380)="fd73555392de2cf3897d", 0xa, 0x3329}], 0x20000, &(0x7f0000000480)='cpuset.effective_mems\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xdffffffa}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(r6) write$FUSE_LK(r5, &(0x7f0000000180)={0x28, 0x0, 0x8, {{0xffffffff, 0x2, 0x1, r7}}}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fddbdf25010000001000040009000000e100fcff6d08000008000400ba030000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000002c0)={0x80000000, 0x4, 0x10001, 0x2, 0x8, 0xffffffff}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c40), 0x0, 0x0) [ 3089.872447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.878274][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:16 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:16 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3092.200009][T20096] bridge0: port 2(bridge_slave_1) entered disabled state [ 3092.207323][T20096] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:18 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x0, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3093.734842][ T111] device 0 left promiscuous mode [ 3093.748345][T20149] IPVS: ftp: loaded support on port[0] = 21 23:48:19 executing program 3: 23:48:19 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3093.802762][ T111] device 1 left promiscuous mode [ 3093.863203][ T111] device 2 left promiscuous mode [ 3093.883127][T20149] chnl_net:caif_netlink_parms(): no params data found [ 3093.906590][ T111] device 3 left promiscuous mode [ 3093.925948][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3093.933024][T20149] bridge0: port 1(bridge_slave_0) entered disabled state [ 3093.944605][T20149] device bridge_slave_0 entered promiscuous mode [ 3093.952042][ T111] device 4 left promiscuous mode [ 3093.959250][T20149] bridge0: port 2(bridge_slave_1) entered blocking state [ 3093.969280][T20149] bridge0: port 2(bridge_slave_1) entered disabled state [ 3093.977603][T20149] device bridge_slave_1 entered promiscuous mode [ 3094.000881][T20149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3094.012014][T20149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3094.035855][ T111] tipc: TX() has been purged, node left! [ 3094.036195][T20149] team0: Port device team_slave_0 added [ 3094.047143][ C0] net_ratelimit: 15 callbacks suppressed [ 3094.047152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.047178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.066168][T20149] team0: Port device team_slave_1 added [ 3094.167028][T20149] device hsr_slave_0 entered promiscuous mode [ 3094.205813][T20149] device hsr_slave_1 entered promiscuous mode [ 3094.244835][T20149] debugfs: Directory 'hsr0' with parent '/' already present! [ 3094.283021][T20149] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.290229][T20149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3094.297603][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3094.304746][T20149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3094.362664][T20149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3094.375557][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3094.384003][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 3094.392241][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 3094.405214][T20149] 8021q: adding VLAN 0 to HW filter on device team0 [ 3094.416863][T18650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3094.425377][T18650] bridge0: port 1(bridge_slave_0) entered blocking state [ 3094.432418][T18650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3094.476065][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3094.484498][T12113] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.491646][T12113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3094.501378][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3094.510105][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3094.547296][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3094.556091][T12113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3094.567891][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3094.578280][T20149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3094.592683][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3094.600309][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3094.636253][T20149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3094.694949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.700776][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.815285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.821425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.935088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.940909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.055142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.060974][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3096.330695][T20179] bridge0: port 2(bridge_slave_1) entered disabled state [ 3096.337873][T20179] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:23 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d\xdft]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:23 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x0, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:23 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3097.637744][ T111] device bridge_slave_1 left promiscuous mode [ 3097.644140][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3097.693107][ T111] device bridge_slave_0 left promiscuous mode [ 3097.705590][ T111] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:24 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x0, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:24 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x0, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:24 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3099.317278][ C1] net_ratelimit: 18 callbacks suppressed [ 3099.317288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3099.317305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.323015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.777756][ T111] device hsr_slave_0 left promiscuous mode [ 3099.817777][ T111] device hsr_slave_1 left promiscuous mode [ 3099.874317][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3099.885530][ T111] team0 (unregistering): Port device team_slave_0 removed [ 3099.895309][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3099.940828][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3100.017915][ T111] bond0 (unregistering): Released all slaves 23:48:26 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d\xdft]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 3100.277786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.283716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.591922][T20242] IPVS: ftp: loaded support on port[0] = 21 [ 3100.651515][T20242] chnl_net:caif_netlink_parms(): no params data found [ 3100.676752][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 3100.684421][T20242] bridge0: port 1(bridge_slave_0) entered disabled state [ 3100.693329][T20242] device bridge_slave_0 entered promiscuous mode [ 3100.719644][T20242] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.727179][T20242] bridge0: port 2(bridge_slave_1) entered disabled state [ 3100.738138][T20242] device bridge_slave_1 entered promiscuous mode [ 3100.757745][T20242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3100.772505][T20242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3100.794107][T20242] team0: Port device team_slave_0 added [ 3100.801559][T20242] team0: Port device team_slave_1 added [ 3100.860573][T20242] device hsr_slave_0 entered promiscuous mode [ 3100.908494][T20242] device hsr_slave_1 entered promiscuous mode [ 3100.968236][T20242] debugfs: Directory 'hsr0' with parent '/' already present! [ 3100.981824][T20242] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.988920][T20242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3100.996171][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 3101.003218][T20242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3101.032943][T20242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3101.045185][T18650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3101.053859][T18650] bridge0: port 1(bridge_slave_0) entered disabled state [ 3101.062024][T18650] bridge0: port 2(bridge_slave_1) entered disabled state [ 3101.080350][T20242] 8021q: adding VLAN 0 to HW filter on device team0 [ 3101.091548][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3101.103338][T18652] bridge0: port 1(bridge_slave_0) entered blocking state [ 3101.110397][T18652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3101.120922][T18650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3101.129825][T18650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3101.138221][T18650] bridge0: port 2(bridge_slave_1) entered blocking state [ 3101.145252][T18650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3101.164322][T20242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3101.174953][T20242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3101.186347][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3101.195328][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3101.203876][ T111] tipc: TX() has been purged, node left! [ 3101.204331][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3101.218382][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3101.221735][ T111] tipc: TX() has been purged, node left! [ 3101.227257][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3101.240563][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3101.250035][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3101.259035][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3101.267768][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3101.276426][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3101.284871][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3101.293481][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3101.315229][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3101.322695][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3101.333424][T20242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3101.368427][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.374254][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.398412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.398419][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.398446][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:27 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x0, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:27 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:27 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="5b6429ff5d3a"], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3101.773636][ T111] device bridge_slave_1 left promiscuous mode [ 3101.791064][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3101.872942][ T111] device bridge_slave_0 left promiscuous mode [ 3101.882535][ T111] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:27 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x0, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) [ 3101.951395][ T111] device bridge_slave_1 left promiscuous mode [ 3101.972369][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.029341][ T111] device bridge_slave_0 left promiscuous mode [ 3102.037880][ T111] bridge0: port 1(bridge_slave_0) entered disabled state 23:48:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup2(r0, r1) [ 3102.188904][ T111] device hsr_slave_0 left promiscuous mode [ 3102.249106][ T111] device hsr_slave_1 left promiscuous mode [ 3102.310078][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3102.360425][ T111] team0 (unregistering): Port device team_slave_0 removed 23:48:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:28 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3102.401670][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3102.503457][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 23:48:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup2(r0, r1) [ 3102.705881][ T111] bond0 (unregistering): Released all slaves 23:48:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup2(r0, r1) [ 3102.849788][ T111] device hsr_slave_0 left promiscuous mode [ 3102.889246][ T111] device hsr_slave_1 left promiscuous mode [ 3102.965947][ T111] team0 (unregistering): Port device team_slave_1 removed [ 3103.005769][ T111] team0 (unregistering): Port device team_slave_0 removed [ 3103.030440][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3103.113415][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3103.237722][ T111] bond0 (unregistering): Released all slaves [ 3104.391061][T20325] IPVS: ftp: loaded support on port[0] = 21 [ 3104.439905][ C0] net_ratelimit: 15 callbacks suppressed [ 3104.439914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3104.445826][T20325] chnl_net:caif_netlink_parms(): no params data found [ 3104.451378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3104.483055][T20325] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.490325][T20325] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.498041][T20325] device bridge_slave_0 entered promiscuous mode [ 3104.505721][T20325] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.512813][T20325] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.521453][T20325] device bridge_slave_1 entered promiscuous mode [ 3104.540303][T20325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3104.554821][T20325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3104.578604][T20325] team0: Port device team_slave_0 added [ 3104.585733][T20325] team0: Port device team_slave_1 added [ 3104.652154][T20325] device hsr_slave_0 entered promiscuous mode [ 3104.700450][T20325] device hsr_slave_1 entered promiscuous mode [ 3104.760199][T20325] debugfs: Directory 'hsr0' with parent '/' already present! [ 3104.774307][T20325] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.781390][T20325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3104.788622][T20325] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.795705][T20325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3104.826796][T20325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3104.838803][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3104.847525][T18655] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.855613][T18655] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.864556][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3104.876446][T20325] 8021q: adding VLAN 0 to HW filter on device team0 [ 3104.887501][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3104.896297][T19474] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.903433][T19474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3104.921792][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3104.930772][T19474] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.937814][T19474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3104.947378][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3104.956149][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3104.967183][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3104.982182][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3104.991143][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3105.000904][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3105.015495][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3105.023200][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3105.033648][T20325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3105.110272][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.116764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3105.134031][T20335] libceph: resolve 'd)ÿ' (ret=-3): failed [ 3105.140133][T20335] libceph: Failed to parse monitor IPs: -3 [ 3105.149454][T20337] libceph: resolve 'd)ÿ' (ret=-3): failed 23:48:31 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="5b6429ff5d3a"], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) 23:48:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3105.155622][T20337] libceph: Failed to parse monitor IPs: -3 [ 3105.230315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.236139][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) [ 3105.328683][T20350] libceph: resolve 'd)ÿ' (ret=-3): failed [ 3105.343596][T20350] libceph: Failed to parse monitor IPs: -3 [ 3105.350377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.356168][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) [ 3105.470692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.476513][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:31 executing program 1: semget(0x3, 0x4, 0x211) 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:31 executing program 1: socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) shutdown(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xbf) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffffd, 0x40000007fff, 0x7ffffffe}, 0x14) shutdown(r2, 0x2) 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3106.329483][T20421] cgroup: fork rejected by pids controller in /syz5 23:48:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:34 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:34 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 23:48:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 23:48:34 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, r1) 23:48:34 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32, @ANYBLOB="00000000ffffffff000e00000800010063627100a40802"], 0x3}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002600ff08009c000d2007ffffa6ffff", @ANYRES32, @ANYRES16], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000193600", @ANYRES32=r4], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 3109.642587][ C1] net_ratelimit: 18 callbacks suppressed [ 3109.642597][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.654118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3109.722639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.722646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.722685][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3109.728467][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.042835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.048708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.683126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.688937][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) dup2(r0, r1) 23:48:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:37 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, @udp={0x0, 0x4e20, 0x4d, 0x0, [@guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x1}, @guehdr={0x400000000000016a, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x1, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x1}, @guehdr={0x2ae}], "29223377f959fcf964e1000000001aedff63b38f95af0bde40a51f528c48a6bcf78fb19281"}}}}}, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x3) 23:48:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) dup2(r0, r1) 23:48:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) fchdir(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:48:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:37 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:37 executing program 1: unshare(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 3111.970746][ T3532] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3111.982976][ T3532] CPU: 1 PID: 3532 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3111.991575][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3112.001638][ T3532] Call Trace: [ 3112.004957][ T3532] dump_stack+0x11d/0x181 [ 3112.009335][ T3532] dump_header+0xaa/0x39c [ 3112.013689][ T3532] oom_kill_process.cold+0x10/0x15 [ 3112.018882][ T3532] out_of_memory+0x231/0xa60 [ 3112.023640][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3112.028714][ T3532] mem_cgroup_out_of_memory+0x128/0x150 [ 3112.034316][ T3532] try_charge+0xb6c/0xbf0 [ 3112.038639][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3112.043667][ T3532] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3112.049127][ T3532] __memcg_kmem_charge+0xcf/0x1b0 [ 3112.054221][ T3532] __alloc_pages_nodemask+0x26c/0x310 [ 3112.059587][ T3532] alloc_pages_current+0xd1/0x170 [ 3112.064600][ T3532] pte_alloc_one+0x18/0x50 [ 3112.069068][ T3532] __pte_alloc+0x2d/0x220 [ 3112.073468][ T3532] copy_page_range+0x135a/0x19b0 [ 3112.078518][ T3532] ? __vma_link_rb+0x3f4/0x440 [ 3112.083331][ T3532] dup_mm+0x74a/0xba0 [ 3112.087412][ T3532] copy_process+0x3138/0x3c40 [ 3112.092086][ T3532] ? do_wp_page+0x19f/0xeb0 [ 3112.096666][ T3532] _do_fork+0xfe/0x7a0 [ 3112.100744][ T3532] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3112.106627][ T3532] ? __read_once_size+0x5a/0xe0 [ 3112.111492][ T3532] __x64_sys_clone+0x130/0x170 [ 3112.116322][ T3532] do_syscall_64+0xcc/0x3a0 [ 3112.120854][ T3532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3112.126794][ T3532] RIP: 0033:0x458eea [ 3112.130681][ T3532] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3112.150297][ T3532] RSP: 002b:00007fffa03b57d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3112.158800][ T3532] RAX: ffffffffffffffda RBX: 00007fffa03b57d0 RCX: 0000000000458eea [ 3112.166781][ T3532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3112.174841][ T3532] RBP: 00007fffa03b5810 R08: 0000000000000001 R09: 0000000001fd5940 [ 3112.182914][ T3532] R10: 0000000001fd5c10 R11: 0000000000000246 R12: 0000000000000001 [ 3112.190940][ T3532] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa03b5860 [ 3112.201658][ T3532] memory: usage 307200kB, limit 307200kB, failcnt 2079 [ 3112.208798][ T3532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3112.215823][ T3532] Memory cgroup stats for /syz0: [ 3112.216022][ T3532] anon 279941120 [ 3112.216022][ T3532] file 0 [ 3112.216022][ T3532] kernel_stack 3022848 [ 3112.216022][ T3532] slab 5795840 [ 3112.216022][ T3532] sock 0 [ 3112.216022][ T3532] shmem 81920 [ 3112.216022][ T3532] file_mapped 0 [ 3112.216022][ T3532] file_dirty 0 [ 3112.216022][ T3532] file_writeback 0 [ 3112.216022][ T3532] anon_thp 257949696 [ 3112.216022][ T3532] inactive_anon 135168 [ 3112.216022][ T3532] active_anon 280010752 [ 3112.216022][ T3532] inactive_file 12288 [ 3112.216022][ T3532] active_file 0 [ 3112.216022][ T3532] unevictable 0 [ 3112.216022][ T3532] slab_reclaimable 946176 [ 3112.216022][ T3532] slab_unreclaimable 4849664 [ 3112.216022][ T3532] pgfault 261723 [ 3112.216022][ T3532] pgmajfault 2046 [ 3112.216022][ T3532] workingset_refault 0 [ 3112.216022][ T3532] workingset_activate 0 [ 3112.216022][ T3532] workingset_nodereclaim 0 [ 3112.216022][ T3532] pgrefill 4565 [ 3112.216022][ T3532] pgscan 5451 [ 3112.216022][ T3532] pgsteal 3288 [ 3112.373475][ T3532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19911,uid=0 [ 3112.418962][ T3532] Memory cgroup out of memory: Killed process 19911 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 3112.452447][ T1067] oom_reaper: reaped process 19911 (syz-executor.0), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB 23:48:40 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) dup2(r0, r1) 23:48:40 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0xf0ffff) 23:48:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:40 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:40 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:40 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:40 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0xf0ffff) [ 3114.845254][ C0] net_ratelimit: 18 callbacks suppressed [ 3114.845264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.856745][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:40 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(0xffffffffffffffff, r0) 23:48:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) [ 3115.885796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.891578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.965845][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.971613][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.975792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.983107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.286006][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.291840][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:43 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) 23:48:43 executing program 1: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0xd97df792d08763d6, 0x113) syz_open_procfs(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='sessionid\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000100)=' \x00\x00\x03') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 23:48:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,camellia)\x00'}, 0x58) dup2(r0, 0xffffffffffffffff) [ 3117.683931][ T3532] syz-executor.0 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 3117.695692][ T3532] CPU: 0 PID: 3532 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3117.704380][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.714439][ T3532] Call Trace: [ 3117.717746][ T3532] dump_stack+0x11d/0x181 [ 3117.722114][ T3532] dump_header+0xaa/0x39c [ 3117.726470][ T3532] oom_kill_process.cold+0x10/0x15 [ 3117.731607][ T3532] out_of_memory+0x231/0xa60 [ 3117.736220][ T3532] ? __rcu_read_unlock+0x66/0x3d0 [ 3117.741279][ T3532] mem_cgroup_out_of_memory+0x128/0x150 [ 3117.746832][ T3532] try_charge+0xb6c/0xbf0 [ 3117.751221][ T3532] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3117.756686][ T3532] cache_grow_begin+0x3bb/0x5c0 [ 3117.761583][ T3532] fallback_alloc+0x161/0x1f0 [ 3117.766280][ T3532] ____cache_alloc_node+0x1b1/0x1c0 [ 3117.771479][ T3532] ? memcg_kmem_get_cache+0x1b1/0x320 [ 3117.776866][ T3532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3117.783113][ T3532] kmem_cache_alloc+0x179/0x5d0 [ 3117.787997][ T3532] vm_area_dup+0x49/0xf0 [ 3117.792286][ T3532] dup_mm+0x330/0xba0 [ 3117.796329][ T3532] copy_process+0x3138/0x3c40 [ 3117.801160][ T3532] _do_fork+0xfe/0x7a0 [ 3117.805225][ T3532] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3117.811507][ T3532] ? handle_mm_fault+0x2c6/0x530 [ 3117.816510][ T3532] __x64_sys_clone+0x130/0x170 [ 3117.821286][ T3532] do_syscall_64+0xcc/0x3a0 [ 3117.825963][ T3532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3117.831852][ T3532] RIP: 0033:0x458eea [ 3117.835760][ T3532] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3117.855366][ T3532] RSP: 002b:00007fffa03b57d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3117.863838][ T3532] RAX: ffffffffffffffda RBX: 00007fffa03b57d0 RCX: 0000000000458eea [ 3117.871810][ T3532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3117.879777][ T3532] RBP: 00007fffa03b5810 R08: 0000000000000001 R09: 0000000001fd5940 [ 3117.887740][ T3532] R10: 0000000001fd5c10 R11: 0000000000000246 R12: 0000000000000001 [ 3117.895850][ T3532] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa03b5860 [ 3117.904918][ T3532] memory: usage 307200kB, limit 307200kB, failcnt 2153 [ 3117.911829][ T3532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3117.918730][ T3532] Memory cgroup stats for /syz0: [ 3117.918940][ T3532] anon 280170496 [ 3117.918940][ T3532] file 0 [ 3117.918940][ T3532] kernel_stack 3022848 [ 3117.918940][ T3532] slab 5795840 [ 3117.918940][ T3532] sock 0 [ 3117.918940][ T3532] shmem 81920 [ 3117.918940][ T3532] file_mapped 0 [ 3117.918940][ T3532] file_dirty 0 [ 3117.918940][ T3532] file_writeback 0 [ 3117.918940][ T3532] anon_thp 257949696 [ 3117.918940][ T3532] inactive_anon 135168 [ 3117.918940][ T3532] active_anon 280088576 [ 3117.918940][ T3532] inactive_file 0 [ 3117.918940][ T3532] active_file 0 [ 3117.918940][ T3532] unevictable 0 [ 3117.918940][ T3532] slab_reclaimable 946176 [ 3117.918940][ T3532] slab_unreclaimable 4849664 [ 3117.918940][ T3532] pgfault 261888 [ 3117.918940][ T3532] pgmajfault 2046 [ 3117.918940][ T3532] workingset_refault 0 [ 3117.918940][ T3532] workingset_activate 0 [ 3117.918940][ T3532] workingset_nodereclaim 0 [ 3117.918940][ T3532] pgrefill 4665 [ 3117.918940][ T3532] pgscan 5484 [ 3117.918940][ T3532] pgsteal 3288 [ 3118.012411][ T3532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21083,uid=0 [ 3118.027909][ T3532] Memory cgroup out of memory: Killed process 21083 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 23:48:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:44 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:44 executing program 3: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0x0) 23:48:44 executing program 3: socket$kcm(0x10, 0x0, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e40f008001fffffe100004000633a77fbac141414e9a33fa1be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28) [ 3119.117404][T22532] tipc: TX() has been purged, node left! [ 3119.818212][T22532] device bridge_slave_1 left promiscuous mode [ 3119.824594][T22532] bridge0: port 2(bridge_slave_1) entered disabled state [ 3119.889027][T22532] device bridge_slave_0 left promiscuous mode [ 3119.895321][T22532] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.127952][ C1] net_ratelimit: 11 callbacks suppressed [ 3120.127962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.127980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.133658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.448076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.453865][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:46 executing program 1: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:48:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:46 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:46 executing program 3: socket$kcm(0x10, 0x0, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e40f008001fffffe100004000633a77fbac141414e9a33fa1be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28) [ 3120.608820][T22532] device hsr_slave_0 left promiscuous mode [ 3120.650494][T22532] device hsr_slave_1 left promiscuous mode [ 3120.735625][T22532] team0 (unregistering): Port device team_slave_1 removed [ 3120.792978][T22532] team0 (unregistering): Port device team_slave_0 removed 23:48:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3120.865268][T22532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3120.979539][T22532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.088862][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.094985][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:47 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3121.164984][T22532] bond0 (unregistering): Released all slaves 23:48:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:47 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) setpriority(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 23:48:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3122.209011][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3122.209018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3122.209047][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3123.461419][T21730] IPVS: ftp: loaded support on port[0] = 21 [ 3123.512355][T21730] chnl_net:caif_netlink_parms(): no params data found [ 3123.538225][T21730] bridge0: port 1(bridge_slave_0) entered blocking state [ 3123.545422][T21730] bridge0: port 1(bridge_slave_0) entered disabled state [ 3123.553537][T21730] device bridge_slave_0 entered promiscuous mode [ 3123.561516][T21730] bridge0: port 2(bridge_slave_1) entered blocking state [ 3123.568620][T21730] bridge0: port 2(bridge_slave_1) entered disabled state [ 3123.576473][T21730] device bridge_slave_1 entered promiscuous mode [ 3123.594285][T21730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3123.604966][T21730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3123.623174][T21730] team0: Port device team_slave_0 added [ 3123.630080][T21730] team0: Port device team_slave_1 added 23:48:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3123.681642][T21730] device hsr_slave_0 entered promiscuous mode [ 3123.720072][T21730] device hsr_slave_1 entered promiscuous mode [ 3123.749872][T21730] debugfs: Directory 'hsr0' with parent '/' already present! [ 3123.771451][T21730] bridge0: port 2(bridge_slave_1) entered blocking state [ 3123.778630][T21730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3123.786025][T21730] bridge0: port 1(bridge_slave_0) entered blocking state [ 3123.793095][T21730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3123.847108][T21730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3123.859074][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3123.868175][T18655] bridge0: port 1(bridge_slave_0) entered disabled state [ 3123.876546][T18655] bridge0: port 2(bridge_slave_1) entered disabled state [ 3123.886123][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3123.898879][T21730] 8021q: adding VLAN 0 to HW filter on device team0 [ 3123.910344][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3123.918874][T18655] bridge0: port 1(bridge_slave_0) entered blocking state [ 3123.926016][T18655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3123.952408][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3123.961486][T18652] bridge0: port 2(bridge_slave_1) entered blocking state [ 3123.968701][T18652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3123.980654][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3123.989749][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3124.001901][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3124.014176][T19474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3124.025845][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3124.036314][T21730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3124.051724][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3124.059264][T18652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3124.070857][T21730] 8021q: adding VLAN 0 to HW filter on device batadv0 23:48:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) setpriority(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 23:48:50 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:50 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) setpriority(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 23:48:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:50 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) setpriority(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) [ 3125.250562][ C0] net_ratelimit: 19 callbacks suppressed [ 3125.250570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.262138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.371226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.377019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.381113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.388546][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.531271][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.537070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.691304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.697116][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:52 executing program 3: 23:48:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:52 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:52 executing program 1: 23:48:52 executing program 3: 23:48:52 executing program 1: 23:48:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:53 executing program 3: 23:48:53 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:55 executing program 1: 23:48:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, 0x300}) 23:48:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 23:48:55 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:56 executing program 3: semop(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote={0xac, 0x3}}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 23:48:56 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 23:48:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "0edc0eaf83f6f0db0b8a0df10e1f5741fa1ddb26e453ad0ab7f2a7b186daee6f3e2483cac69636e47ae690816a46276e60035f5d27be4f70a5d8fbc6ad9520c84c6fbcdfc31fb60ef297a6f54f2cbc344deda8f2b360382a9afe9f2482e24cce874a9ce713672e4c48f9e7ae7d755ea2bd9495bfa72516e6b9a04c7a57b2f05f"}) 23:48:56 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3130.278255][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3130.285817][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3130.354111][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3130.399305][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3130.533285][ C1] net_ratelimit: 10 callbacks suppressed [ 3130.533295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.533317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.538988][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.556236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.693305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.699271][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.853365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.859172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.503694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.509508][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:48:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x1}, 0x20) 23:48:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 23:48:58 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r2 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:48:58 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:59 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:48:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) [ 3133.180571][T18652] libceph: connect (1)[d::]:6789 error -101 [ 3133.192749][T18652] libceph: mon0 (1)[d::]:6789 connect error [ 3133.204327][T18652] libceph: connect (1)[d::]:6789 error -101 [ 3133.211185][T18652] libceph: mon0 (1)[d::]:6789 connect error 23:48:59 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r2 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:48:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440), 0x0, 0x0) [ 3133.384728][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3133.390834][T19474] libceph: mon0 (1)[d::]:6789 connect error 23:48:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3133.469238][T19474] libceph: connect (1)[d::]:6789 error -101 23:48:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440), 0x0, 0x0) [ 3133.538961][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3135.655932][ C0] net_ratelimit: 17 callbacks suppressed [ 3135.655942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3135.667383][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:02 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r2 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008440), 0x0, 0x0) 23:49:02 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:02 executing program 3: shmctl$IPC_SET(0x0, 0xf, 0x0) 23:49:02 executing program 3: 23:49:02 executing program 0: [ 3136.364696][T19474] libceph: connect (1)[d::]:6789 error -101 23:49:02 executing program 3: 23:49:02 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3136.410254][T19474] libceph: mon0 (1)[d::]:6789 connect error 23:49:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:02 executing program 0: [ 3136.776363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.776375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.776402][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.782178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.936881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.942778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.096564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.102406][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:05 executing program 0: 23:49:05 executing program 3: 23:49:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:05 executing program 1: 23:49:05 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:05 executing program 1: 23:49:05 executing program 3: 23:49:05 executing program 0: 23:49:05 executing program 1: 23:49:05 executing program 3: 23:49:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:05 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:05 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x19}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}}}}, 0x0) 23:49:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 3140.938494][ C1] net_ratelimit: 12 callbacks suppressed [ 3140.938503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3140.938528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3140.944215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.098586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.104372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.258692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.264469][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.898973][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.904758][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000000), 0x0) 23:49:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x267, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 23:49:08 executing program 0: 23:49:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:08 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:08 executing program 3: 23:49:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000200)={0x0, 0x0, 0x923b}) 23:49:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:08 executing program 0: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 23:49:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:08 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000500)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1000000000000006, 0x101102) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000240), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 23:49:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:08 executing program 1: semget(0x3, 0x4, 0x0) 23:49:08 executing program 0: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 23:49:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000500)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1000000000000006, 0x101102) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000240), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) [ 3143.019511][ C1] protocol 88fb is buggy, dev hsr_slave_0 23:49:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:09 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 23:49:09 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:09 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x3, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 23:49:09 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:10 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:10 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 23:49:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3144.297626][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3144.309888][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3144.319704][T18652] libceph: connect (1)[d::]:6789 error -101 [ 3144.327935][T18652] libceph: mon0 (1)[d::]:6789 connect error [ 3144.352856][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3144.400361][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3145.037566][T18652] libceph: connect (1)[d::]:6789 error -101 [ 3145.045208][T18652] libceph: mon0 (1)[d::]:6789 connect error [ 3145.093426][T18655] libceph: connect (1)[d::]:6789 error -101 [ 3145.099470][T18655] libceph: mon0 (1)[d::]:6789 connect error [ 3146.071105][ C0] net_ratelimit: 16 callbacks suppressed [ 3146.071111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.082639][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:12 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:12 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:12 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 3146.531458][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3146.549321][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3146.556332][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3146.562500][T19474] libceph: mon0 (1)[d::]:6789 connect error 23:49:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:12 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x0, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:12 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x0, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) [ 3147.125659][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3147.133320][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3147.147903][T19474] libceph: connect (1)[d::]:6789 error -101 [ 3147.161435][T19474] libceph: mon0 (1)[d::]:6789 connect error [ 3147.181690][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.187524][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.191648][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.199016][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:49:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 3147.341710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.347667][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.501788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.507620][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xaf1830bc) 23:49:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:15 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 23:49:15 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x0, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0x403) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, r1}}) 23:49:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) [ 3149.632196][T18655] libceph: connect (1)[d::]:6789 error -101 [ 3149.642258][T18655] libceph: mon0 (1)[d::]:6789 connect error [ 3149.657133][T18655] libceph: connect (1)[d::]:6789 error -101 [ 3149.674579][T18655] libceph: mon0 (1)[d::]:6789 connect error 23:49:15 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f0000000080)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:49:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(r2, &(0x7f00000003c0)=""/230, 0xe6, 0x0, 0x0, 0x0) 23:49:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) 23:49:18 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x20048000) 23:49:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1b0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000000), 0x250) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 23:49:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDDISABIO(r0, 0x4b37) 23:49:18 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) dup2(r1, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:49:18 executing program 3: dup(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @bcast={0xa2, 0xa6, 0xa8, 0x9}, 0xee00}) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) 23:49:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:49:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x81420000a77, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) 23:49:18 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 23:49:19 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:19 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba416229d04a3392d7f1491a82e9497f67f17600b58767db91e29eb92a20f86dddfb0f8dda322d1ddeadba924051c7894f228f090746b1a55e851e700000000000000abd216b4f2e7eca231cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e65892f0eeb109613a4134a4005451085bd500e9ce720babcd022a39bd03f32bae24183ae4fcc477360bd57adcca93b0e38df68ddadb4b7ded1564139005923ea4598889", 0xe1, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xcec, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:49:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000300)) [ 3153.424775][ C0] protocol 88fb is buggy, dev hsr_slave_0 23:49:19 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000100)) 23:49:19 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:49:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:49:19 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 3154.030541][ T26] audit: type=1800 audit(1576799359.949:20805): pid=24984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17086 res=0 [ 3154.788410][ T26] audit: type=1800 audit(1576799360.709:20806): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17086 res=0 23:49:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:21 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:49:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:49:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:49:21 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 3156.220871][ T26] audit: type=1800 audit(1576799362.138:20807): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17713 res=0 23:49:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3156.466308][ C0] net_ratelimit: 16 callbacks suppressed [ 3156.466319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.477839][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:22 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:22 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:49:22 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x7, 0x3000}, 0x4) ftruncate(r1, 0x1000000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="10002bbd7000fedbdf25040000005c0007000c00040065030000000000000c00040003000000000000000c00030000080000000000000800010091fc00000c000400010100000000000008000200ffff00000c00040000020000000000000c00040006000000000000002c00060004000200080009005900000008000100da09000008000100001000000400020008000100070000002400070008000200ff0f0000080002000200"], 0x2}}, 0xc0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400000, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/187, 0x45, 0x5d0c3195ee1228c3, 0x0, 0xffffffffffffffbb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 3157.185978][ T26] audit: type=1800 audit(1576799363.098:20808): pid=25048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16744 res=0 [ 3157.586888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.586894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.586929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.592707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.747036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.752868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.907045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.912949][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'erspan0\x00', @ifru_mtu}) 23:49:24 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:49:24 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:24 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:49:24 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 23:49:25 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba416229d04a3392d7f1491a82e9497f67f17600b58767db91e29eb92a20f86dddfb0f8dda322d1ddeadba924051c7894f228f090746b1a55e851e700000000000000abd216b4f2e7eca231cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e65892f0eeb109613a4134a4005451085bd500e9ce720babcd022a39bd03f32bae24183ae4fcc477360bd57adcca93b0e38df68ddadb4b7ded1564139005923ea4598889", 0xe1, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) pipe(0x0) pipe(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xcec, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:49:25 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba416229d04a3392d7f1491a82e9497f67f17600b58767db91e29eb92a20f86dddfb0f8dda322d1ddeadba924051c7894f228f090746b1a55e851e700000000000000abd216b4f2e7eca231cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e65892f0eeb109613a4134a4005451085bd500e9ce720babcd022a39bd03f32bae24183ae4fcc477360bd57adcca93b0e38df68ddadb4b7ded1564139005923ea4598889", 0xe1, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xcec, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:49:25 executing program 5: [ 3159.241277][ T26] audit: type=1800 audit(1576799365.156:20809): pid=25064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17141 res=0 23:49:25 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:25 executing program 1: 23:49:25 executing program 5: [ 3159.642534][T25185] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3159.694512][T25185] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3159.738945][T25185] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3159.768628][T25185] EXT4-fs error (device loop3): ext4_fill_super:4488: inode #2: comm syz-executor.3: iget: bad extended attribute block 35208 [ 3159.808389][T25185] EXT4-fs (loop3): get root inode failed [ 3159.826500][T25185] EXT4-fs (loop3): mount failed [ 3161.749027][ C1] net_ratelimit: 11 callbacks suppressed [ 3161.749037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3161.749068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3161.754759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3161.909153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3161.914979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.069178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.074979][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:49:28 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:28 executing program 1: 23:49:28 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba416229d04a3392d7f1491a82e9497f67f17600b58767db91e29eb92a20f86dddfb0f8dda322d1ddeadba924051c7894f228f090746b1a55e851e700000000000000abd216b4f2e7eca231cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e65892f0eeb109613a4134a4005451085bd500e9ce720babcd022a39bd03f32bae24183ae4fcc477360bd57adcca93b0e38df68ddadb4b7ded1564139005923ea4598889", 0xe1, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xcec, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:49:28 executing program 5: 23:49:28 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:49:28 executing program 1: [ 3162.316292][ T26] audit: type=1800 audit(1576799368.235:20810): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17172 res=0 23:49:28 executing program 5: [ 3162.392864][T25212] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3162.424678][T25212] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3162.456189][T25212] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 23:49:28 executing program 5: [ 3162.562585][T25212] EXT4-fs error (device loop3): ext4_fill_super:4488: inode #2: comm syz-executor.3: iget: bad extended attribute block 35208 23:49:28 executing program 5: 23:49:28 executing program 1: [ 3162.709474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.715305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.728276][T25212] EXT4-fs (loop3): get root inode failed 23:49:28 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 3162.769709][T25212] EXT4-fs (loop3): mount failed 23:49:28 executing program 1: [ 3163.830071][ C0] protocol 88fb is buggy, dev hsr_slave_0 23:49:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000980)="0d00000000002a73c11115d827660199159dff51120000000000010005e260c650b5edace635fdb69d0000000000000052c29aed4275613070980359baa75202b41c7e6bfb708ab1924347edababd06928b2f93d3a83cd6cef8b96afe022ae100222c5ac6dec83361f00000000341991de64fc2593d3eeefcf1c92353f5c1a8581eab4f5f4176f77079c56b36d5af1f4325350fac043a50cde403721616189a2041a0bf098ef919a572f326d0783a8ac1c74d5a1af6b6d68a71308c1a9dacd6fa07649132f08c258e907de548f1d68bb6e8574a70f01b5321d872d12070f394d371938ce0d6bc601cf5cf3ad604776cfa45486eb92ed1e0c", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:49:31 executing program 5: 23:49:31 executing program 1: 23:49:31 executing program 3: 23:49:31 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081dc) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:49:31 executing program 2: syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0xc, @rand_addr=0x2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x2, 0x73}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x30000, 0x3ff, 0x4abf55b7}}, 0x44) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x12000, 0x8, 0x0, 0x7}) readahead(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 23:49:31 executing program 5: 23:49:31 executing program 3: 23:49:31 executing program 1: [ 3165.407977][ T26] audit: type=1800 audit(1576799371.323:20811): pid=25255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17537 res=0 23:49:31 executing program 5: 23:49:31 executing program 1: 23:49:31 executing program 3: [ 3165.958396][T25255] ================================================================== [ 3165.966528][T25255] BUG: KCSAN: data-race in ext4_mark_iloc_dirty / ext4_writepages [ 3165.974310][T25255] [ 3165.976647][T25255] write to 0xffff888128d8f790 of 8 bytes by task 20403 on cpu 0: [ 3165.984360][T25255] ext4_writepages+0x158c/0x2500 [ 3165.989280][T25255] do_writepages+0x6b/0x170 [ 3165.993787][T25255] __writeback_single_inode+0xaf/0x8e0 [ 3165.999250][T25255] writeback_sb_inodes+0x4ba/0xa50 [ 3166.004345][T25255] __writeback_inodes_wb+0xe8/0x1b0 [ 3166.009526][T25255] wb_writeback+0x557/0x6a0 [ 3166.014014][T25255] wb_workfn+0x696/0x970 [ 3166.018259][T25255] process_one_work+0x3d4/0x890 [ 3166.023102][T25255] worker_thread+0xa0/0x800 [ 3166.027697][T25255] kthread+0x1d4/0x200 [ 3166.031758][T25255] ret_from_fork+0x1f/0x30 [ 3166.036154][T25255] [ 3166.038486][T25255] read to 0xffff888128d8f790 of 8 bytes by task 25255 on cpu 1: [ 3166.046105][T25255] ext4_mark_iloc_dirty+0x810/0x1580 [ 3166.051375][T25255] ext4_mark_inode_dirty+0xe9/0x420 [ 3166.056559][T25255] ext4_dirty_inode+0xb1/0xe0 [ 3166.061227][T25255] __mark_inode_dirty+0x5d4/0x940 [ 3166.066253][T25255] generic_write_end+0x1b7/0x1f0 [ 3166.071182][T25255] ext4_da_write_end+0x158/0x620 [ 3166.076115][T25255] generic_perform_write+0x1d3/0x320 [ 3166.081390][T25255] ext4_buffered_write_iter+0x143/0x290 [ 3166.086937][T25255] ext4_file_write_iter+0xf4/0xd40 [ 3166.092066][T25255] new_sync_write+0x388/0x4a0 [ 3166.096869][T25255] __vfs_write+0xb1/0xc0 [ 3166.101206][T25255] vfs_write+0x18a/0x390 [ 3166.105455][T25255] ksys_write+0xd5/0x1b0 [ 3166.109686][T25255] __x64_sys_write+0x4c/0x60 [ 3166.114265][T25255] do_syscall_64+0xcc/0x3a0 [ 3166.118767][T25255] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3166.124642][T25255] [ 3166.126982][T25255] Reported by Kernel Concurrency Sanitizer on: [ 3166.134023][T25255] CPU: 1 PID: 25255 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3166.142694][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3166.152850][T25255] ================================================================== [ 3166.160900][T25255] Kernel panic - not syncing: panic_on_warn set ... [ 3166.167473][T25255] CPU: 1 PID: 25255 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 3166.176123][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3166.186168][T25255] Call Trace: [ 3166.189470][T25255] dump_stack+0x11d/0x181 [ 3166.193802][T25255] panic+0x210/0x640 [ 3166.197691][T25255] ? vprintk_func+0x8d/0x140 [ 3166.202279][T25255] kcsan_report.cold+0xc/0xd [ 3166.206875][T25255] kcsan_setup_watchpoint+0x3fe/0x460 [ 3166.212260][T25255] __tsan_read8+0xc6/0x100 [ 3166.216669][T25255] ext4_mark_iloc_dirty+0x810/0x1580 [ 3166.221954][T25255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3166.228185][T25255] ext4_mark_inode_dirty+0xe9/0x420 [ 3166.233380][T25255] ? ext4_dirty_inode+0x86/0xe0 [ 3166.238237][T25255] ext4_dirty_inode+0xb1/0xe0 [ 3166.242912][T25255] ? ext4_setattr+0x1670/0x1670 [ 3166.247754][T25255] __mark_inode_dirty+0x5d4/0x940 [ 3166.252784][T25255] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3166.258670][T25255] generic_write_end+0x1b7/0x1f0 [ 3166.263604][T25255] ext4_da_write_end+0x158/0x620 [ 3166.268533][T25255] ? ext4_write_end+0x800/0x800 [ 3166.273379][T25255] generic_perform_write+0x1d3/0x320 [ 3166.278677][T25255] ext4_buffered_write_iter+0x143/0x290 [ 3166.284211][T25255] ext4_file_write_iter+0xf4/0xd40 [ 3166.289312][T25255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3166.295541][T25255] ? iov_iter_init+0xe2/0x120 [ 3166.300998][T25255] new_sync_write+0x388/0x4a0 [ 3166.305668][T25255] __vfs_write+0xb1/0xc0 [ 3166.309913][T25255] vfs_write+0x18a/0x390 [ 3166.314144][T25255] ksys_write+0xd5/0x1b0 [ 3166.318374][T25255] __x64_sys_write+0x4c/0x60 [ 3166.322973][T25255] do_syscall_64+0xcc/0x3a0 [ 3166.327820][T25255] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3166.333697][T25255] RIP: 0033:0x45a919 [ 3166.337593][T25255] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3166.357191][T25255] RSP: 002b:00007f00bcdb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3166.365602][T25255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 3166.373565][T25255] RDX: 000000000f642e7e RSI: 0000000020000200 RDI: 0000000000000003 [ 3166.381528][T25255] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3166.390374][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00bcdb46d4 [ 3166.398352][T25255] R13: 00000000004cbe37 R14: 00000000004e5c18 R15: 00000000ffffffff [ 3166.407868][T25255] Kernel Offset: disabled [ 3166.412206][T25255] Rebooting in 86400 seconds..