7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:16 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)='\x01@#:,}vboxnet1$(\x00', 0xffffffffffffffff}, 0x30) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x24041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x72) r5 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x2, 0x0, 0x7, 0x0, 0x137, 0x300, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x18040, 0x1000, 0x9, 0x8582f062042a35e8, 0xae5d, 0x0, 0x2bf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x8) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d) mkdir(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\x01\x83Z\xc4\x06S$\ah\x93\xff\xf7Z\xcb\v1\xf2\xc4\x85\x85\xa6\xfa\x15\x10\xa8\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xd5\x12\xc7\x1ee\x86\xcc\xdb/\xc5\x97\xea\x93\xa7\xde\xc9u\xb1\x9f\xce\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|h$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3We\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xfb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xfc\xe1\t]\x84J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17\x85\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?2,\x89\xb1%p\x8a\r\f\xe0,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa[\xa7\x02\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\xd1`\x88\xf4K\xe7\x80\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\t\x91\xa3\"\x85H@\xb9\x97\bZ\xa5(S\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\xbc\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6\xaa`\x88\x8a\xf4u$\x17\xff\xdbR\x02\xe8V\xdc\xb8]F\xdap\xf7\xdf~G\xe1\xe8\xd2\xe6\x1d\x9b/\xd8\x93F\xcf\xae]\xbb\xa6\x85\x1d/\xef\xf8\xfb>\x9e{\\\x1e\xf1i~\xee\xbb\x1e\x93SN\nA\x99\xd8\xa1y\x185\x86\xbe\x1eU\x9b4\xeem\xaa\xae\x1b\xb09\x9f.\xa3\xc0\xe6C\xc8~\xd8\x95f\xfbF\x05\xb9\xbde\n\x82\x91\r\xf0\x16\xbe[\x00H\x96\x7f8\x7fx\x06\xe9\x0fa\xfa\x1eg)\xc1vaG=a\xf10\x04rw\x0f\xbb%\xc6f\x81\xbaEO\x80\xc3Tc\xc4\xc0\x14\t#2\xd8\xe8\xecX4H\xf0\xc3\'\xba[\xd3}\x16\xa3\xf3\n\x00\xdd\xf3\x81\xaa\x99\xcb(\xb2\x19C\xe4\xc9\x87\x9a\x8c\xbd\xa0\x9cW\a\xb6\xc2R\xabn\xf2', 0x2761, 0x0) perf_event_open$cgroup(&(0x7f0000000b00)={0x5, 0x70, 0x9, 0x0, 0x0, 0x8, 0x0, 0x9, 0x200, 0x461d83b3dd07ed4d, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x200000000009}, 0x20, 0x0, 0x10000, 0x5c588eb3570453dd, 0x42, 0x5, 0x59c}, r6, 0x0, 0xffffffffffffffff, 0x1f) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 15:33:16 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00@\x00'}) 15:33:16 executing program 0: clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20000000) unshare(0x24020400) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, 0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) 15:33:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:16 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x03\\\x00'}) 15:33:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00fb6a0605c0edd2ae060bf8dfdf0b2b4e5d476a9c594c19e9e8ccab3ae840315fbe063b8d37aaabac79b3da374f9b1e0d66434dc2e2c92d568a0ced0a5841f4668a9327639fb8d80645ae4f69764917d7d9ad766fbfaabdf6da4bf3895958c8e88d9f05b1dbc7ae08f6ec666605e3bdbf64b74643528587d19c48ef9ed0527081aec12846105d3f011684d5b2887489a68c17684740972a09684e5fdb9a8ecb681324b17a5f0cfc3cec"], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e813d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 15:33:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:17 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x02]\x00'}) [ 1721.809237] 9pnet: Insufficient options for proto=fd [ 1721.900745] 9pnet: Insufficient options for proto=fd 15:33:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:18 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00a\x00'}) 15:33:18 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe2(&(0x7f0000000040), 0x84800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) 15:33:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:18 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x8f\x00'}) [ 1722.472176] net_ratelimit: 18 callbacks suppressed [ 1722.472221] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.482953] protocol 88fb is buggy, dev hsr_slave_1 15:33:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) fcntl$notify(r1, 0x402, 0x12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 15:33:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:19 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x01\xa8\x00'}) [ 1723.361253] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.366475] protocol 88fb is buggy, dev hsr_slave_1 [ 1723.511801] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.517486] protocol 88fb is buggy, dev hsr_slave_1 [ 1723.591739] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.597268] protocol 88fb is buggy, dev hsr_slave_1 [ 1723.603539] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.608947] protocol 88fb is buggy, dev hsr_slave_1 15:33:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:21 executing program 0: 15:33:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x03\xe0\x00'}) 15:33:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664ca8f5d0b97f0", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x800, 0x8000}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0x1, 0x80000001, [], &(0x7f0000000140)=0x5}) syz_open_pts(r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) syz_open_pts(r3, 0x200400) r4 = dup3(r2, r3, 0xc0000) getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1725.119608] 9pnet: Insufficient options for proto=fd 15:33:21 executing program 0: 15:33:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xa0\x00\x80\x00'}) [ 1725.214729] 9pnet: Insufficient options for proto=fd 15:33:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:21 executing program 0: 15:33:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:21 executing program 5: r0 = inotify_init1(0x400) fstat(r0, &(0x7f00000000c0)) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) 15:33:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:21 executing program 0: 15:33:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x02'}) 15:33:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:22 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'\x00', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 15:33:22 executing program 0: [ 1726.844576] 9pnet: Insufficient options for proto=fd 15:33:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695cb"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\b'}) 15:33:23 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="000000000000000000000024e444ea"]) 15:33:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:23 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) [ 1727.511283] net_ratelimit: 12 callbacks suppressed [ 1727.511293] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.521410] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.671251] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.676397] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.751291] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.756531] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.761752] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.767019] protocol 88fb is buggy, dev hsr_slave_1 15:33:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[], 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0xe}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:33:24 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00 '}) 15:33:24 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="8cdeab3445a4765f1187f85d3e78492c7766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:33:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:24 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x036'}) [ 1728.614249] 9pnet: Insufficient options for proto=fd 15:33:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1728.727193] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.732361] protocol 88fb is buggy, dev hsr_slave_1 15:33:24 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x805, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='/dev/cec#\x00') 15:33:24 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00?'}) 15:33:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[], 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:27 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x02]'}) 15:33:27 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="bee1b789d5586b39ca0fbbb25b845ad43c2e2a5152037283bddf7f3fdc2c1eafdc4b5ab2ecf0337b6f2c51ef89d3804240eb3b311d8459d757353d", &(0x7f00000000c0)="43d988295fe60fcc917b29b58850736b0669474c45ac932586168536b57c745ff64ecb4822f812d1e911b2c5e22003405ce19037450611f6d36eb41906912ae8c25eb0ea13439b56474023813d31cfc50ca428d9f61fb843e1631517cb08359580480ce8ef44c2ddd8831023664f961579ddf0bb7d5a970f", 0x2}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[], 0x0, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x541b, &(0x7f0000000100)) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000000c0)=""/186) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:28 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x01\x9d'}) [ 1732.028315] EXT4-fs error (device loop0): ext4_fill_super:4395: inode #2: comm syz-executor.0: iget: root inode unallocated 15:33:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1732.152840] EXT4-fs (loop0): get root inode failed [ 1732.287762] EXT4-fs (loop0): mount failed 15:33:28 executing program 0: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x1, 'sh\x00\x00\x00\x00\x00P\x00\x01*h\xe1\x8d\x00'}, 0x2c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1732.575262] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (32 blocks) [ 1732.871365] net_ratelimit: 18 callbacks suppressed [ 1732.871374] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.881491] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.751330] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.756470] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.911331] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.916473] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.991255] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.996357] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.001889] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.006941] protocol 88fb is buggy, dev hsr_slave_1 15:33:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x46, 0x5, 0x3f, "7bdf08b1536312926927d0ef73e21bee", "790e026c7e6ca8ef2c6923acb1e45af1768a97eb5ca45d40c711afa3f8e1f9117554426db93495661606771c3eb957ea81"}, 0x46, 0xd42f4dc5d3856729) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:30 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x80\x00\xa0'}) 15:33:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:30 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x56) r1 = socket$inet6(0x18, 0x3, 0x0) r2 = dup2(r0, r1) getsockopt(r2, 0x200000029, 0x0, 0x0, 0x0) 15:33:30 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x01\xa0'}) 15:33:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:30 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x56) r1 = socket$inet6(0x18, 0x3, 0x0) r2 = dup2(r0, r1) getsockopt(r2, 0x200000029, 0x0, 0x0, 0x0) 15:33:30 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x01\xa8'}) 15:33:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='\xce\x8f*\xf7\x00', 0x5041, 0x0) close(r0) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='\xce\x8f*\xf7\x00', 0x0, 0x0) close(r1) 15:33:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:31 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x03\xe0'}) 15:33:31 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x5) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000, 0x80) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20060001}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000050}, 0xf4865e19f992cdce) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x29000400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x120, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x100}, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000006c0)={0x0, @capture={0x0, 0x1, {0x7, 0x8}, 0x4, 0x276c}}) r4 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 15:33:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492275, 0x0) r2 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000180), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:33:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1735.770479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:33:31 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xff\xff\xff\xfd'}) 15:33:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492275, 0x0) r2 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000180), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:33:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/31]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:32 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xff\xff\xff\xfe'}) 15:33:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:32 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xfd\xff\xff\xff'}) 15:33:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/31]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:32 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0xc0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:33 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:33 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xff\xff\xff\xff'}) [ 1737.921319] net_ratelimit: 14 callbacks suppressed [ 1737.921329] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.931781] protocol 88fb is buggy, dev hsr_slave_1 15:33:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/46]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1738.071277] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.076467] protocol 88fb is buggy, dev hsr_slave_1 [ 1738.151307] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.156509] protocol 88fb is buggy, dev hsr_slave_1 [ 1738.161787] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.166896] protocol 88fb is buggy, dev hsr_slave_1 15:33:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:34 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\xff\xff\xff\xff'}) 15:33:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1202, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d583ba043adf9c1a23d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 1739.111280] protocol 88fb is buggy, dev hsr_slave_0 [ 1739.116488] protocol 88fb is buggy, dev hsr_slave_1 15:33:35 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) timerfd_create(0x0, 0x0) socket(0x10, 0x0, 0x0) [ 1739.298202] 9pnet: Could not find request transport: X; C­ùÁ¢=0x0000000000000004 15:33:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/54]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1739.376612] 9pnet: Could not find request transport: X; C­ùÁ¢=0x0000000000000004 15:33:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:35 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x8a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) syz_open_pts(r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0xffffffffffffffe1, 0x1, 0x6, 0xff, 0x576e, 0x9803, 0x2, 0xfb, 0x2, 0x1, 0x8001, 0x9, 0x7, 0x100, 0x7fff]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r2, 0x3}, &(0x7f00000003c0)=0x8) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="746eef3d0000000000581e23dcb8986ad2f5170000000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="ececcd8c0a"]) 15:33:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/54]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) timerfd_create(0x0, 0x0) socket(0x10, 0x0, 0x0) 15:33:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f357be0d05ac04081e2b4303f2737284f1d2dfdec5b93f3a57250df27", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 1740.143917] 9pnet: Insufficient options for proto=fd 15:33:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:36 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) timer_create(0x4, &(0x7f0000000040)={0x0, 0x20, 0x1, @thr={&(0x7f00000001c0)="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", &(0x7f00000000c0)="fe09094be464edcc4710f36bddc4ee760cfd6c990edab761d76d08f5197ed04bf193752d71d34409c225822c31139489438151ed08ba6e68df39fa25a9a39f5b2a010b24b9cb4f38582f624d15757ee05e4e82f31183ac1741444dfb945e7966f8645e04a7eb21223019f6e775d2e975b140b4b3cd14f43b405f459e3123b05c095b79359bf718ababc29cd8eba084255841b56ac44f4ddf80307a459a0b"}}, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@uid_lt={'d<\x00', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 't\xff\a\x00\x00\xb7\x9b+\x02\x00\x00\x00fd,'}}]}}) 15:33:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100"/54]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc8"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) timerfd_create(0x0, 0x0) socket(0x10, 0x0, 0x0) 15:33:37 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) timerfd_create(0x0, 0x0) socket(0x10, 0x0, 0x0) 15:33:37 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:38 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:38 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) timerfd_create(0x0, 0x0) socket(0x10, 0x0, 0x0) 15:33:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc8"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:38 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:33:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:33:39 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) syz_open_pts(r3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000140), &(0x7f00000002c0)=0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0)) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x101000, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000740)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/130, 0x82}], 0x2, &(0x7f0000000640)=""/222, 0xde}, 0x2066) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'\x00\x00\x00\x00\x00\x00\x00\x00 ', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r6}}]}}) [ 1743.271325] net_ratelimit: 18 callbacks suppressed [ 1743.271334] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.281460] protocol 88fb is buggy, dev hsr_slave_1 15:33:39 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:33:39 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) dup(r0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) syz_open_pts(r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x10000) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 15:33:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:39 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1744.151266] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.156486] protocol 88fb is buggy, dev hsr_slave_1 [ 1744.311971] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.317731] protocol 88fb is buggy, dev hsr_slave_1 [ 1744.391325] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.396567] protocol 88fb is buggy, dev hsr_slave_1 [ 1744.401810] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.406862] protocol 88fb is buggy, dev hsr_slave_1 15:33:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:40 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@permit_directio='permit_directio'}]}}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000001c0)={0x8, "3f63c9875ef30cb696366eb8e0d3835931432327f002039df491768081003993", 0x10, 0xffff, 0x80, 0x6b7aa5897ead8b4b, 0x1}) socket$pptp(0x18, 0x1, 0x2) [ 1745.014554] 9pnet: Insufficient options for proto=fd 15:33:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:41 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1745.193631] 9pnet: Insufficient options for proto=fd 15:33:41 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 15:33:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc896"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:41 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:42 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x54, 0x4, 0x9, {0xf476, 0x3}, {0x0, 0x4}, @period={0x0, 0x8, 0x5, 0xb519, 0x1cf3, {0xfff, 0x1, 0x5, 0x2}, 0x7, &(0x7f0000000040)=[0x2, 0x7, 0x0, 0x7ff, 0x5, 0x7671, 0x101]}}) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_bt_hci(r1, 0xc0000039, &(0x7f00000000c0)="e9727761edd1e1461020af9a4f950f5433aec53281f5f20cd18ea9ea7662c8150daf4d7c48dbcf57ae38fe8e495132b427b700f30dbc3cb3581b22e4424b692a09dfd893a15926e4ca951f0aac73d6b63232207f34d0cbb7933787321004f18bf2d3b5dd1ebf1f73b557b28e6e8a4b7b276b9baff8d673b5f1a1e8a83b666767efe8ef52217332494130f320fe40a27628324ab20c39e26e6a896120") lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 15:33:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:42 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x01\xa0'}) 15:33:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) r2 = socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x9, 0x0, 0x0, r2}, 0x10) 15:33:42 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x02\x00'}) 15:33:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000280)={0x1, 0x0, [0x2, 0x0, 0x1, 0x0, 0x8], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:44 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\b\x00'}) [ 1748.311271] net_ratelimit: 12 callbacks suppressed [ 1748.311280] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.321447] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.471890] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.477607] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.551664] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.557288] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.563176] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.568657] protocol 88fb is buggy, dev hsr_slave_1 [ 1749.511303] protocol 88fb is buggy, dev hsr_slave_0 [ 1749.516437] protocol 88fb is buggy, dev hsr_slave_1 15:33:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) socket(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15:33:45 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00a\x00'}) 15:33:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c9b54006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:33:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1749.760879] 9pnet: Insufficient options for proto=fd 15:33:45 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x8f\x00'}) 15:33:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:46 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x56595559, 0x81}}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) syz_open_pts(r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)) syz_open_pts(r4, 0x0) r5 = dup3(r3, r4, 0x40000) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) socket(0x0, 0x1, 0x0) 15:33:46 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x9d\x01\x00'}) 15:33:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:46 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xa0\x01\x00'}) 15:33:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:47 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66646c726664960c83ae872fc66e6f3c", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:33:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) [ 1751.359619] 9pnet: Could not find request transport: fdlrfd– ƒ®‡/Æno<0x0000000000000004 15:33:47 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00]\x02\x00'}) 15:33:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:47 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x55eb35a687ab3798) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x10000, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 15:33:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:47 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x006\x03\x00'}) 15:33:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:48 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xe0\x03\x00'}) 15:33:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:48 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w_A\x00\x00=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:33:48 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00 \x00'}) [ 1752.941380] 9pnet: Insufficient options for proto=fd 15:33:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:49 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x036\x00'}) 15:33:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1753.671256] net_ratelimit: 18 callbacks suppressed [ 1753.671265] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.681789] protocol 88fb is buggy, dev hsr_slave_1 15:33:49 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00?\x00'}) 15:33:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:50 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00@\x00'}) 15:33:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:50 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:50 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x03\\\x00'}) 15:33:50 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1754.551288] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.556432] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.610627] 9pnet: Insufficient options for proto=fd [ 1754.644679] 9pnet: Insufficient options for proto=fd [ 1754.711562] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.717251] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.801963] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.808568] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.814441] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.820244] protocol 88fb is buggy, dev hsr_slave_1 15:33:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:51 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x02]\x00'}) 15:33:51 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:51 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00a\x00'}) 15:33:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:51 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x8f\x00'}) 15:33:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x4, 0x1) r2 = socket$inet6_sctp(0xa, 0xf3758c3d2e4d751d, 0x84) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@generic={0xd, "adead80941beafff72b52370bd5c7b36e67706b886df93b9afc0663e67c1db390eb44b5a39486e32ecf46b6085aa7efe7f7b4dd9218a6ade7d724e37a5908968092d8d50cd153f19dff74f0d11398002685d0b865021a8fa0dd6b1c662b57ec94bce8eb4b6ad5cdeb26f0d3ee18b97ce2392b133c9b5c1e73d2bf1705fc8"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)="cd47e56da74bcaee1c2951b3687606b2028fe292bb0250a0b61f5349e2d113", 0x1f}, {&(0x7f0000000140)="bd530a25bbd49b03c62fe1fc", 0xc}, {&(0x7f00000001c0)="bc9f0b66cddcacb697ddd08b3901f3", 0xf}, {&(0x7f0000000200)="b634a22383e2c1b67061f68f5644a04c5e8d7d0688ebf0ac887c5413dbd00643c0e7899a0ce18ceadd06799caa34ba6604dea4b7c75e3841cd367d89692589185aa6e1ae956aa046846cca253d904cdb8c8e431d929d5691c970d35e227d8820930e0d", 0x63}], 0x4, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0xa8}, 0x10) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 15:33:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:33:52 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x01\x9d\x00'}) 15:33:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:52 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x01\xa8\x00'}) 15:33:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) [ 1756.698665] ptrace attach of "/root/syz-executor.4"[26847] was attempted by "/root/syz-executor.4"[26858] 15:33:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x400, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:53 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:53 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xa0\x00\x80'}) 15:33:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0x0, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:54 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:54 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="275422d99fc1175a"]) r2 = socket$inet(0x2, 0x200000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @multicast1, r7}, 0xfffffffffffffdf7) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa000000000000000030d29a741dd135bcd8303c113001b068177af523f8b0e971"], 0x10) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x29, @loopback, 0x4e20, 0x2, 'rr\x00', 0x2, 0x3, 0x25}, 0x2c) 15:33:54 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) recvmmsg(r2, &(0x7f0000008680)=[{{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/101, 0x65}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/180, 0xb4}], 0x6, &(0x7f0000000140)=""/47, 0x2f}, 0x5}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/61, 0x3d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/182, 0xb6}, {&(0x7f0000001b40)=""/195, 0xc3}, {&(0x7f0000001c40)=""/164, 0xa4}], 0x8}, 0x8f9a}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/223, 0xdf}, {&(0x7f0000004400)=""/101, 0x57}], 0x2, &(0x7f0000001f40)=""/228, 0xe4}, 0x6}, {{&(0x7f0000002040)=@pppol2tpv3, 0x80, &(0x7f0000004540)=[{&(0x7f00000020c0)=""/80, 0x50}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/225, 0xe1}, {&(0x7f0000003240)=""/201, 0xc9}, {&(0x7f0000003340)=""/103, 0x67}, {&(0x7f00000033c0)=""/4096, 0xffffffffffffffab}, {&(0x7f00000088c0)=""/147, 0x93}, {&(0x7f0000004480)=""/191, 0xbf}], 0x8}, 0x1}, {{&(0x7f00000045c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004640)=""/71, 0x47}], 0x1, &(0x7f0000004700)=""/21, 0x15}, 0x6b66}, {{&(0x7f0000004740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005cc0), 0x0, &(0x7f0000005d40)=""/123, 0x7b}, 0x6}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000007140)=[{&(0x7f0000005e40)=""/80, 0x50}, {&(0x7f0000005ec0)=""/77, 0x4d}, {&(0x7f0000005f40)=""/79, 0x4f}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/163, 0xa3}, {&(0x7f0000007080)=""/182, 0xb6}], 0x6, &(0x7f00000071c0)=""/120, 0x78}, 0x9}, {{&(0x7f0000007240)=@alg, 0x80, &(0x7f0000008500)=[{&(0x7f00000072c0)=""/95, 0x5f}, {&(0x7f0000007340)=""/71, 0x47}, {&(0x7f00000073c0)=""/14, 0xe}, {&(0x7f0000007400)=""/113, 0x71}, {&(0x7f0000007480)=""/17, 0x11}, {&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/4096, 0x1000}], 0x7, &(0x7f0000008580)=""/251, 0xfb}, 0x80}], 0x8, 0xa71ca253281ab2df, &(0x7f0000008880)={0x0, 0x1c9c380}) syz_open_dev$video4linux(&(0x7f00000043c0)='/dev/v4l-subdev#\x00', 0x7, 0x111000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trGns=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c00446ce800000000d9b073945a67de7b1eebd3dcd4dbfc4042a142c8a21ddc0b2911820000000000"]) socket$inet6(0xa, 0x80000, 0x9) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video37\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x580) 15:33:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0x0, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:55 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1759.912431] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.918049] protocol 88fb is buggy, dev hsr_slave_1 15:33:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000141}, 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:56 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x03'}) 15:33:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:56 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:56 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0x0, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x03'}) 15:33:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, 0x0, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="dfffffeb00000068b1ee36a604d00873ab3ed34fe60d3a7d8bc3b21304b0b7e0c31a8d06bae86d13179a516776e0577d24b699bd8f88165bf354bb33e541e7137e4c11cec86f56deb6f012a0e0d7957c90b66c27af23f971f6cf753fd5eaeb", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) syz_open_pts(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 15:33:57 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x02'}) [ 1761.661015] 9pnet: Insufficient options for proto=fd 15:33:57 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) [ 1761.725658] 9pnet: Insufficient options for proto=fd 15:33:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:57 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x541b, &(0x7f0000000100)) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000000c0)="fd541893423534aa96561752a8904fbee78b106991b9a966f4501d89df91e9a6a7dc47547fc821e270ba15086ab209f200e1b1d0bdc119d0b665b6efbc2e7ffecfd0d6d8db463213196e321403e3445d2e49e1af05d7d376b788f1e4ff7199b54ebe6359b87597ffa68b1a02dd9babd9797c0623a495b2f8618c235a6de0b1d57f6d6195faa1d5fe4fec773671618ae8ade0", 0x92, 0x7f, 0x0, 0x3, r0}, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:33:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:33:58 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, 0x0, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:58 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) 15:33:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:59 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x400) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:33:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:59 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x80\x00'}) 15:33:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:33:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, 0x0, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:33:59 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) 15:33:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1764.071984] net_ratelimit: 18 callbacks suppressed [ 1764.072032] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.082619] protocol 88fb is buggy, dev hsr_slave_1 15:34:00 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:00 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x03'}) 15:34:00 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0d4c1dc4052c00"]) 15:34:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 15:34:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:01 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:01 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xfd\xff\xff'}) [ 1765.648713] 9pnet: Insufficient options for proto=fd 15:34:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) write(r0, &(0x7f00000004c0)="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", 0x1000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x541b, &(0x7f0000000100)) write(r4, &(0x7f00000001c0)="7ba9eb8c445fc5894554e98661e358033e9f5d75e1cce45cbc2fa82c9e9004070423b2752f24c260b8ffd5919a2edbc2437254a7bb27c7c54fb15281416cc98d2c2b87858244ca986228aca865fd9cd37d460348461c892b005a7e6a175c37c1278c9f2ae32fcd4a6459e8b3553a522e9e37e5b5db1c969f705a58250de39c6b2feddc773833de4e04ab8f4473554da5b1939d6275f18cde363e60c647b387868846e5fea2a7d11ce21eba15be9bccdeacf6161cd0d54f1dd2947ab11896f2963b7900a999c9363fadee78a8db8a84062567de0cbe33ad63639f13abbc68d1ef6e5e0899354873b02005", 0xea) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x80000001, @loopback, 0x5}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @remote, 0x70}], 0x58) 15:34:02 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xfe\xff\xff'}) 15:34:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1766.224404] cgroup: fork rejected by pids controller in /syz0 15:34:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:02 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xff\xff\xff'}) 15:34:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:02 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\xff\xff\xff'}) 15:34:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="acf28a130884daa85b2af83a05460474bbbced3d9c9d76c8a5c41226fcc18890720b0e7fe6003aace4b327dde8f2759e5b91e9329b9f4d7260a115292a0a9518432342e5d8163dbe589b22a1649b9d0f3f4d3728b49929bf1e0dba4926d9b32917b677b5b788cfe453"]) 15:34:03 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1767.227313] 9pnet: Insufficient options for proto=fd 15:34:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1769.111304] net_ratelimit: 12 callbacks suppressed [ 1769.111313] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.121567] protocol 88fb is buggy, dev hsr_slave_1 15:34:05 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:05 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x3}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4000}) ioctl$VT_WAITACTIVE(r3, 0x5607) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77729b2fe0110e9d6a438c850793626944839a21cffdaf876f19216eca02c0adb956b3d2bfb4873d43a671d32725b42c6f6c1f5afdc1bbd17c9a9801ef104a7e2c0b32b9e2dbfb30fd3c84bb8e248500b52508847df867a4a1a290715b4eec5745a3edd966aaa520ad20b5db705bf6ea2d3d5cbff0ee0a1ff0f65446bec1f21c49bced1ee022301913b6b49e1ae0e3ef2bd5ba2406471ff8704cde4919405551201236f0564c5564e79c9b54af34a2a6cd212667d7b2921703efe3286bd71e5859", @ANYRESHEX=r1, @ANYBLOB=',smackfsdef=)\'posix_acl_accessppp0,subj_type=wfdno,subj_role=9p\x00,\x00']) 15:34:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1769.271282] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.276453] protocol 88fb is buggy, dev hsr_slave_1 15:34:05 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1769.352071] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.357780] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.363450] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.369071] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.371029] 9pnet: Insufficient options for proto=fd 15:34:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) [ 1769.485435] 9pnet: Insufficient options for proto=fd 15:34:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @remote}}}, 0x84) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r4 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 15:34:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:05 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) 15:34:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}}, 0x0) [ 1770.321806] protocol 88fb is buggy, dev hsr_slave_0 [ 1770.327446] protocol 88fb is buggy, dev hsr_slave_1 15:34:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 15:34:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)}], 0x1}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x3a) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='B', 0x18000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)='j', 0x1}, {&(0x7f0000000e40)="ce", 0x1}, {&(0x7f0000000e80)="dc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)="c4", 0x1}], 0x1}}], 0x4, 0x4008000) 15:34:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:07 executing program 0: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x3a) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='B', 0x18000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)='j', 0x1}, {&(0x7f0000000e40)="ce", 0x1}, {&(0x7f0000000e80)="dc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)="c4", 0x1}], 0x1}}], 0x4, 0x4008000) 15:34:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x3a) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='B', 0x18000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)='j', 0x1}, {&(0x7f0000000e40)="ce", 0x1}, {&(0x7f0000000e80)="dc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)="c4", 0x1}], 0x1}}], 0x4, 0x4008000) 15:34:08 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:08 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:08 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:08 executing program 0: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x3a) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='B', 0x18000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)='j', 0x1}, {&(0x7f0000000e40)="ce", 0x1}, {&(0x7f0000000e80)="dc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)="c4", 0x1}], 0x1}}], 0x4, 0x4008000) 15:34:08 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000000c0)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'\x00\x00\x00\x00\x80', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:09 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:09 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') 15:34:09 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1773.299253] 9pnet: Insufficient options for proto=fd 15:34:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x3}, 0xfffffffffffffcf0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x10000000008936, &(0x7f0000000000)) 15:34:09 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:09 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:10 executing program 0: 15:34:10 executing program 0: [ 1774.471284] net_ratelimit: 18 callbacks suppressed [ 1774.471293] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.481608] protocol 88fb is buggy, dev hsr_slave_1 15:34:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:10 executing program 0: 15:34:10 executing program 0: 15:34:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x80\x00'}) 15:34:10 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000000)={0x8, {0x800, 0xffffffff, 0x81, 0x5}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r5, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r8, r9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4000, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000073666e6f3d00b871ffffffffeb000000005e00", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=r9, @ANYBLOB="2c76657273696f6e3d39703230d974abec229453bf68652c6e6f657874656e642c634898c8f7a236d19f702c00"]) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r11 = gettid() ptrace$setopts(0x4206, r11, 0xfffffffffffffffb, 0x100010) chdir(&(0x7f00000001c0)='./file0\x00') tkill(r11, 0x3c) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xf, r11, 0x80000000004, &(0x7f0000000540)="179f3ce714ca890600000000000010f104000000da577eceaa2689dd7754b890feb446e63bd8749b34ff33a010f05008558b43477e68cf46778fa235bf7494b4196f266d9651ad6af8e5eaceaca5d34dd49f1a5d490f8951e25fd428a1c17c03fcb025da1a4e2d5346b86e403363a5ac1416baca9cbd017125c0a71d5ffcaf7b4b70fa811c2f46a32fd18d4ef59aa916fbe54a7f4697b84bb42b5bd33e7681c09806d3f382e6b944d02dcedc67fa1c566e95561b7c062d259ecca80f25d34a42d2eb8985ee4f4b06c76bf4cf3586971ffb0ffb0653d5c6391088a62f") getpid() r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x3c) ptrace$cont(0x18, r12, 0x0, 0x0) ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r12, 0x0, 0x0) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x3c) ptrace$cont(0x18, r13, 0x0, 0x0) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r13, 0x0, 0x0) ptrace$cont(0x20, r13, 0x80000000, 0xfffffffffffffffd) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000240)={0xfffffff9, 0x20, 0x8, 0x9, 0x1000}) prctl$PR_SET_PTRACER(0x59616d61, r11) close(0xffffffffffffffff) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) r15 = openat$cgroup_ro(r10, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bind$isdn(r15, &(0x7f0000000100)={0x22, 0x1, 0x2, 0x3f, 0x3}, 0x6) 15:34:10 executing program 0: 15:34:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:11 executing program 0: 15:34:11 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000002c0)={0x28}, 0x28) [ 1775.351305] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.356481] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.410909] audit: type=1800 audit(1575473651.410:467): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16695 res=0 [ 1775.511724] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.517591] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.591978] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.598129] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.604368] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.610094] protocol 88fb is buggy, dev hsr_slave_1 15:34:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000380)={0xca, 0x9, 0x1}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r12, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x48b]}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@mpls_newroute={0x3c, 0x18, 0x4, 0x70bd2b, 0x25dfdbff, {0x1c, 0x10, 0x14, 0x1f, 0xfe, 0x2, 0xfe, 0x8}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x6}, @RTA_DST={0x8, 0x1, {0x80800}}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) 15:34:11 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) 15:34:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:11 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x81) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 15:34:12 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x02\x00'}) [ 1775.998826] audit: type=1804 audit(1575473652.000:468): pid=28383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir547668920/syzkaller.ZvHX9G/359/bus" dev="sda1" ino=16769 res=1 [ 1776.045650] 9pnet: Insufficient options for proto=fd 15:34:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:12 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x04\x00'}) 15:34:12 executing program 0: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x81) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 15:34:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:12 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\b\x00'}) [ 1776.602411] audit: type=1804 audit(1575473652.610:469): pid=28513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir547668920/syzkaller.ZvHX9G/360/bus" dev="sda1" ino=16691 res=1 15:34:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:13 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00a\x00'}) 15:34:13 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0219daf7877298"]) 15:34:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:13 executing program 0: epoll_create(0xf4) getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='udf\x00', 0x20000, &(0x7f00000003c0)='Acgroupcgroup\\$+!\'}vmnet1md5sumbdev^\x19(-eth1!@security\\[wlan0\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) pipe2(0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x62, 0x0) [ 1777.288689] 9pnet: Insufficient options for proto=fd 15:34:13 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x8f\x00'}) 15:34:13 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='transo}', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:34:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:13 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0xe45f9fa26e8f4c86) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=""/255, &(0x7f00000000c0)=0xff) 15:34:13 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x9d\x01'}) 15:34:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:14 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xa0\x01'}) 15:34:14 executing program 0: epoll_create(0xf4) getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='udf\x00', 0x20000, &(0x7f00000003c0)='Acgroupcgroup\\$+!\'}vmnet1md5sumbdev^\x19(-eth1!@security\\[wlan0\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) pipe2(0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x62, 0x0) 15:34:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:14 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xa8\x01'}) 15:34:14 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00]\x02'}) 15:34:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:34:15 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000040)={0x1, &(0x7f0000000380)="1e0712fc9da54112fbc0801f7960afa05f6670699c0db06198f7da0ccb4e8795ffb47a8dcc74054388cbdc0a8d95a4bc5bfbc82d81d28ce37f600613f0a8b1dbcac519ee65886585a14406fc92580f7a7f02452718fe33352a2c4344c40c403c0a0cc971fb01b95added1acd5801a006253f62c2336f2a15ce948680fd4668d264d2cc45f188"}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)) syz_open_pts(r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x10005, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) sendmsg$nl_netfilter(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)={0x510, 0xf, 0x7, 0x100, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x9}, [@generic="df63d5a187addf70ed08d6940cd8844e1327af8ca54a9dfd14b5d3399cbb04d2c5ecd56221447377", @generic="d3bdcb9abc254ff9f5102828c27e4f96f48cae783e07433c3fc3739bf6708668d52d1fb85bc0da65a600a8f10cd094883d9f6bb5525cb8847a04f2553eef27947bbb3f428366bb4857e31a7643c87a1f1eede042291e33eafc8499beb6f9b77c8c86e8b3089f67699cf33f9a6ac7576cf8613a6970278ba541b128f8e4685b9c4650b8b65ebada1d34e2ae757b9202d01e169fd44b377a0efc417d0f77", @typed={0x4, 0x8d}, @typed={0x8, 0x74, @uid=r11}, @nested={0x120, 0x68, [@generic="1ced790fcf05ab25dce856c52d31941d20e8b2d66c1d57ce1576403cb3d18e6447563887d6d4b96ae4e06a4478a7affa778eb8d57cd7ff2945a6de2deb8d634260eebcc77a82e7a1cabbedf7698ebe67228dcc9d684dc6b4b7cc81fd9019fdc4bfdf07fdea9bf262f611d771d73958368c1187402e4f6c01bee527e33cf227c8045959d13e22193b28168d81151577909b9106c6d9a961723ad7fb9728b6a5683ff925fc56", @typed={0x68, 0x3b, @binary="1566cf3373bb75cdb598740ae7166998edd7a1354c33683776ee706f1acac3ba19a000cfa1623a61cbbe9c6af73feb2f5422ce43af0a61c24b8970083f2163d9a97089a506a9bde9ec26a7bdc17260ec373f3dc3efdf37215a280d53ae25fafbe8"}, @typed={0xc, 0x21, @u64=0xffff}]}, @typed={0x10, 0x53, @str=',user\xeceth1\x00'}, @typed={0x40, 0x8b, @binary="ed19d7172ea75e65e4b043b058ecd242e004d034a07da890290826529ca46c4497bfeee0194e4819f3abe1836a76501d581af5f6c252eae82529ff"}, @generic="1833448a2054547919864c267c4350abb6aada29e6799988260e491b3fb9a4eb1eb2c9f56e50176accac1a8c4c57e116aa0d6c01d0a917450ce3278e550c6f6ed9fdec03d09dc50e4a9e08c5ee80800e1592da535050868fc8d58eab3a6a689efec0f95889f167a25911fb3ea4bc482ea311ed885ff1e3f3b2431435d0e8c7ebbee6a34f1ef4499513ce9daf51953ddb499162d750518b55810b", @nested={0x17c, 0x85, [@generic="f0b83b05dfe2038f6726a0f860ac7dd61c642171425c29b3b82cfbfc2d0f40cf789bca814eabad5770d9f305bc475e557065b35d1945b749b4f62ccb2ed05999a0b64730b2d3997d87132cac916f86a734638d3735ae12afbf10abc1a8cd5500fa12da01942e3b6d399c48732c217b5ce6b7a986d34b0885a9c13850d2975339b67e44ae02f7a0e06cea39083f9a7ccbda6d6f38e1235bc90028707af164a589a67dd1aff1c391d2ceb31f69518ba4d8", @generic="389045e7f2da0de3507581961acbd26d3092917ba2a4f92605204dc5f6f23e2d5610de7c3b34d545f363f1f585498dd556a955eba6a82220224bf82a904d44b596d2b4c4928e8764a34eeabca98e73a590a922a0679bff184cbfd455f48a9a1aad40b6de9bb81ecc09385ad1792cfdced4078a60d1040110309b6c6f12cf9eedb2273a372979ae289a28361cc784a8320e6fabe9fb5314e519acf469faf5c381326340cb4d1b7c6d091b9ded83d39c0f382867f4f85590adee7c1f376c0967ada0f67fff41"]}, @generic="836046f9928b8d160f6a848fb8dd95947b30d66788da3327d5d70b1ef37d11577d9fff895de428b6892c8d04de3376798dd30c599c4bf967bad51ac37e6d68cc52addbacf92dc68e4c84b7c12b4285c48e2a9f680fb453f97c7aaed035478f18d9cf15bb160d5c0ada709d2bd31d4a7f536064c29e9d8f99b87d37aaf71616fb1d0e4ec8c8565b8f549f97a344139c9df77da13b0c2f1d3c7b1e555d0bcf39fdd946175e"]}, 0x510}, 0x1, 0x0, 0x0, 0x440c5}, 0x20000020) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)) syz_open_pts(r7, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000080)) syz_open_pts(r12, 0x0) splice(r12, 0x0, r6, 0x0, 0x10002, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000000c0)={0x800, 0x9, 0x5, 0xbac, 0x800, 0x23}) ioctl$KVM_SMI(r1, 0xaeb7) r13 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0x8, "c8fe0454df64"}, 0x8, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x35, 0x65, 0x0, 0x65, 0x66, 0x35, 0x33], 0x2d, [0x62, 0x64, 0x33, 0x37], 0x2d, [0x18, 0x60, 0x2d, 0x33], 0x2d, [0x36, 0x63, 0x66, 0x38], 0x2d, [0x35, 0x63, 0x39, 0x32, 0x31, 0x62, 0x65, 0x34]}}}, {@euid_lt={'euid<', r11}}]}}) 15:34:15 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x006\x03'}) 15:34:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000400000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc89695"]) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x4000, 0x0, 0x0, 0xa, 0xffff, 0xa2, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1779.511252] net_ratelimit: 12 callbacks suppressed [ 1779.511261] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.521707] protocol 88fb is buggy, dev hsr_slave_1 15:34:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1779.671249] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.676790] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.751742] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.757820] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.764541] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.770410] protocol 88fb is buggy, dev hsr_slave_1 15:34:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0)) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a97cc81ec7ba03104def44643f6f3d29a46d8d06b452b5cfd906920d1c4e76feb7f3c375e7e1c6d9321e5a38573a05c17902aa9aa1751b987e10a23862832913a63f8e78e277872d2855ac54dbcb6818d65cb2cd03178517b3e123705bd81aa57cddcf3e911ccf0e34e222e9ebf408000000000000000000dfcdca2f367b87f02d8acb24442d372a4ffbcb36ac25", @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYBLOB=',\x00']) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000003c0)=0x2) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)) syz_open_pts(r4, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000400)={0xff82, 0x8001, 0x0, 0x6, 0x343, 0x3}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x6afb7cbb8f5d35a2, 0x0) r6 = accept$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) 15:34:16 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00 '}) 15:34:16 executing program 3: clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002dd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmdt(0x0) [ 1780.712023] protocol 88fb is buggy, dev hsr_slave_0 [ 1780.717682] protocol 88fb is buggy, dev hsr_slave_1 15:34:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/23) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="040000006e9fb3", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 15:34:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:17 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x036'}) [ 1781.021668] 9pnet: Insufficient options for proto=fd 15:34:17 executing program 0: clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002dd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmdt(0x0) 15:34:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x7, 0x4}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x541b, &(0x7f0000000100)) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x7, 0x8000, 0x885}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0) pipe(&(0x7f0000000140)) syz_open_dev$mice(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETSF(r6, 0x541b, &(0x7f0000000100)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)) r8 = syz_open_pts(r7, 0x0) ioctl$TCSETSF(r8, 0x541b, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB=',\x00']) 15:34:17 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00?'}) 15:34:17 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00@'}) 15:34:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x4000000000000a, 0x300) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 15:34:17 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x03\\'}) 15:34:18 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x02]'}) 15:34:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:18 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x541b, &(0x7f0000000100)) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000040)) 15:34:18 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00a'}) 15:34:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffffe2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:19 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x01\xa8'}) 15:34:19 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)) r0 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 15:34:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000009500000000000000554aea2b0c3c568da19cbf6ed3b53c26cbfdd01eb3f1bb0296965478509b0f1df12bd7ef55f6c988e0c9e1b99f629ad3336e9e12700bc1d60f07f18973341b15eefa145db2affe01afdd6d08977761d3453849c60408e90a8e2e4419f900d8fe4174f4dcd916d0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) 15:34:19 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x03\xe0'}) 15:34:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:20 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:20 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x3, 0x1}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trandno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:34:20 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000003c0)={{0x0, 0x18}, 0x0, 0x4d, 0x2, {0x28, 0x5}, 0x5, 0xffffffff}) [ 1784.872330] net_ratelimit: 18 callbacks suppressed [ 1784.872377] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.883495] protocol 88fb is buggy, dev hsr_slave_1 15:34:20 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x11, 0x8, 0x2, 0x2, 0x2, 0x3, 0x1, 0x228, 0xfffffffffffffe58, 0x2cc, 0x4, 0xfffe, 0x38, 0x1, 0x3, 0x9}, [{0x1, 0x1000, 0x0, 0x346, 0x7, 0x6951, 0x100000000}, {0x4, 0x3, 0xc1, 0x1f, 0xffff, 0x7fff, 0xaaf6, 0x3}], "4c3dfddecb68109caeb9b40f79b684ad71731a5f43a20444159654d5e7ba98cfacdb3551e120b771afa938cb13b3bb7eeec9efbef91593815807d47f5a2e3025f9a6cce1a1b3ffd2239afa695f72ff73c2ad82043ef2abc6ffac", [[], [], [], [], [], [], []]}, 0x80a) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:21 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1785.752244] protocol 88fb is buggy, dev hsr_slave_0 [ 1785.758374] protocol 88fb is buggy, dev hsr_slave_1 15:34:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000003c0)={{0x0, 0x18}, 0x0, 0x4d, 0x2, {0x28, 0x5}, 0x5, 0xffffffff}) 15:34:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) [ 1785.921291] protocol 88fb is buggy, dev hsr_slave_0 [ 1785.926444] protocol 88fb is buggy, dev hsr_slave_1 15:34:22 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x8) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@uid_gt={'uid>', r4}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@hash='hash'}, {@context={'context', 0x3d, 'user_u'}}]}}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{0x8, 0x7, 0x40, 0x10000}, {0x0, 0x8, 0xc0, 0x9}, {0x120, 0x1f, 0x80, 0x1f}, {0x1, 0x9, 0x4, 0x3}, {0xfffc, 0x80, 0x0, 0x4}, {0x0, 0x7, 0x0, 0xc44c}, {0x20, 0x72, 0x7, 0xffffffe3}]}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x800, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="918d27c9cf565f8b5de1b14df48570f0e02e6982770e1e391e0c07b2798949b8ad1ebc0b0ee2c900bfd779dd41249e50a3ebc4897ba2b209623337be3b12c6edaefc359b817bb3c85f3c06308f33dfbb83e6eacab96e04ed4d1f7fe8a413e56b8d0d1a678bba5f64faa8f067f1f29090f7e6f672dd33fa5c90dfdedbff87ace2cdd9bec6d4f0873bb5e10263b56a51c2ae91aa0ca4056a05327f541d83e2a660d3ee64ce55294c81370524f887ebfb518261b9f2be087c86e51afbb2934f964d690cd67c32cf2a21b5c027f458c0fe8a41a20678433105ff164412385e7b99f8875b85306d43353ab4e64d86f211a783d6", 0xf1}], 0x1, &(0x7f0000000580)=[@iv={0xc8, 0x117, 0x2, 0xb0, "2239cdb1fdd41ac6e0028727aa2c0c9207aa0de9ed23a40617dce390b33d0db2430edd9a50f16b0d09f9ba2286e6da3eb561166ef4e29d8a2494f8919a36b4ff7cbe8ef646e3475bc18d82f053de3ddc504756671398eddfd0818add9c7842c2130d68c07faa1d66d6cab11a455eae81fa1609bff929cb6c0b4174d006816884f2a57ef4cbd8056d5410260846fca45136054688e320705f2a86460e2ad5b9b8b48966defe9fc317abfb0cb1165cf60f"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf1, "7ca33c7f8a2aceee113fb377a0db3a405ec473dc52279bda1423fd166b95d92823a8048d139d74a3dd45a5048bcdf87431981d96078c916d622ea14c18b3e45c666998cedfd6eb47ac93fe851797fd0a73ad3ec3cc5f9a47bd149fe7cb0f8fb16809f0aa289ed044db73954ba61252788d6bf4ff48a01471490cfb9a2dcbac03342d60c5289be50aca070c8a600fdc63a19c97686513c7e1efa967afddb0067051a05fb666d42e96397dd59636d62cdf705ea954adf3d8cd1ff4beb5b4041a0d4605343492547ce8a0061dbc388273841929fe80dfe94b6944ca1f5c36f07755103fd4b084e8aeaeb46a3d04c3f5e75d0d"}, @iv={0xf8, 0x117, 0x2, 0xe1, "8fa5898217f08f966e317e7e9b92e5d76b8461e45d4e8c0149d16ad27e8abea40a448932e9b92f1b68936bca3844bae6b98621f76af401d816f242bbf6fc67ca610425af58be4808baf51ebb22c3432a3a0df6969fe182bfd0fa5a453055ce662409226c7eb2b7f60d03934e8cd4673182d4dc202dd710527a1aa6dd1a74e06cdcf8c8f1f99c9a8aa36610ddb92f716d437aa514888d1f33f9a865a58a90b291326bd11fbfb054937c72b7603a257b7b6ce7c4ea1bbd5b6483f877e673d8c70ae2736635414766c2badbdc44bb54ee5c91bba51bdbfd8e0fa7201224070027ba1b"}, @assoc={0x18, 0x117, 0x4, 0x552a}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x328, 0x8090}, 0x44040) [ 1785.991287] protocol 88fb is buggy, dev hsr_slave_0 [ 1785.996426] protocol 88fb is buggy, dev hsr_slave_1 [ 1786.001694] protocol 88fb is buggy, dev hsr_slave_0 [ 1786.006801] protocol 88fb is buggy, dev hsr_slave_1 15:34:22 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000003c0)={{0x0, 0x18}, 0x0, 0x4d, 0x2, {0x28, 0x5}, 0x5, 0xffffffff}) 15:34:22 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:23 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="9a0000000000000000000000000000000046f7c4e5eb6bc311ffb00fd1ea910c8cc23ab63fdae0e45f95fd1d9b37299dd4cac7550b7826fba95c9c06e0dee8157a722ebacf12ae096b61a710df9d1a24e2eedb4e92ec3d137c36cde66a4079151ae44602046e2a0f39c6ede963f82f00f3657fa75a1b7558fd05b9010087f16b87eac4e9a93241233520dd89839c898b3130", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 15:34:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad6", 0x56}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:34:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1787.186798] 9pnet: Insufficient options for proto=fd 15:34:23 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:23 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="007766446e6f3d54d1d15fe872a4b1df44603673e5ea0d99211e97b1a2bab67c470a91643ffa", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:34:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000003c0)={{0x0, 0x18}, 0x0, 0x4d, 0x2, {0x28, 0x5}, 0x5, 0xffffffff}) 15:34:23 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/\xe9\xd6v/cQc#\x16', 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000140)={r8, 0x20}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000002c0)={r8, 0x8, &(0x7f0000000040)=[0x5, 0x0, 0x2, 0x1, 0x4, 0x8, 0x4, 0x4], &(0x7f00000000c0)=[0x10000, 0x5, 0x3f], 0x25, 0x2, 0x0, &(0x7f00000001c0)=[0x3, 0x401], &(0x7f0000000240)=[0x6, 0x0, 0x7f, 0x7fff]}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @in={0x2, 0x4e24, @empty}, @can={0x1d, r9}, @llc={0x1a, 0x335, 0x6c, 0xfe, 0x78, 0x0, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0xc3d6, &(0x7f00000003c0)='ip6erspan0\x00', 0x9, 0x10000, 0x8}) sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x1d, r10}, 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x4, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "665c08b2a7fa881a"}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d6664117266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 15:34:24 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:34:24 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1788.659606] 9pnet: Could not find request transport: fdrfdno=0x0000000000000004 [ 1788.851892] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1788.863833] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1788.870377] CPU: 0 PID: 29988 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1788.878349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.887740] Call Trace: [ 1788.890448] dump_stack+0x197/0x210 [ 1788.894136] dump_header+0x15e/0xa55 [ 1788.897898] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1788.903208] ? ___ratelimit+0x60/0x595 [ 1788.907117] ? do_raw_spin_unlock+0x178/0x270 [ 1788.911650] oom_kill_process.cold+0x10/0x6ef [ 1788.916179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.921749] ? task_will_free_mem+0x139/0x6e0 [ 1788.926281] out_of_memory+0x362/0x1330 [ 1788.930291] ? lock_downgrade+0x880/0x880 [ 1788.934468] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1788.939605] ? oom_killer_disable+0x280/0x280 [ 1788.944132] ? find_held_lock+0x35/0x130 [ 1788.948248] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1788.953240] ? memcg_event_wake+0x230/0x230 [ 1788.957591] ? do_raw_spin_unlock+0x178/0x270 [ 1788.962204] ? _raw_spin_unlock+0x2d/0x50 [ 1788.966383] try_charge+0xec5/0x1490 [ 1788.970141] ? lock_downgrade+0x880/0x880 [ 1788.974324] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1788.979208] ? rcu_read_unlock+0x33/0x60 [ 1788.983396] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1788.988689] ? wp_page_copy+0xedd/0x16a0 [ 1788.988720] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1788.988746] mem_cgroup_try_charge+0x259/0x6b0 [ 1789.003505] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1789.008474] wp_page_copy+0x430/0x16a0 [ 1789.012405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.017987] ? follow_pfn+0x2a0/0x2a0 [ 1789.021825] ? do_raw_spin_unlock+0x178/0x270 [ 1789.026359] do_wp_page+0x57d/0x10b0 [ 1789.030317] ? lock_acquire+0x16f/0x3f0 [ 1789.034330] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1789.039908] ? kasan_check_write+0x14/0x20 [ 1789.044289] ? do_raw_spin_lock+0xc8/0x240 [ 1789.048544] __handle_mm_fault+0x2305/0x3f80 [ 1789.052957] ? copy_page_range+0x2030/0x2030 [ 1789.057388] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1789.062054] handle_mm_fault+0x1b5/0x690 [ 1789.067379] __do_page_fault+0x62a/0xe90 [ 1789.071438] ? vmalloc_fault+0x740/0x740 [ 1789.075491] ? trace_hardirqs_off_caller+0x65/0x220 [ 1789.080496] ? SOFTIRQ_verbose+0x10/0x10 [ 1789.084554] do_page_fault+0x71/0x57d [ 1789.090176] page_fault+0x1e/0x30 [ 1789.093633] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1789.099718] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1789.118900] RSP: 0000:ffff888098587ab8 EFLAGS: 00010206 [ 1789.124520] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1789.131783] RDX: 0000000000001000 RSI: ffff888098be4b00 RDI: 0000000020714000 [ 1789.139043] RBP: ffff888098587af0 R08: ffffed101317ca00 R09: 0000000000000000 [ 1789.146301] R10: ffffed101317c9ff R11: ffff888098be4fff R12: 0000000020713500 [ 1789.153586] R13: ffff888098be4000 R14: 0000000020714500 R15: 00007ffffffff000 [ 1789.160959] ? copyout+0xe2/0x100 [ 1789.164424] copy_page_to_iter+0x329/0xd50 [ 1789.168667] ? kill_fasync+0x323/0x4a0 [ 1789.172551] pipe_to_user+0xb4/0x170 [ 1789.176259] __splice_from_pipe+0x391/0x7d0 [ 1789.180570] ? iter_to_pipe+0x660/0x660 [ 1789.184545] do_vmsplice.part.0+0x249/0x2b0 [ 1789.188872] ? do_tee+0x820/0x820 [ 1789.192316] ? import_iovec+0x233/0x3e0 [ 1789.196307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.201856] __do_sys_vmsplice+0x1b9/0x210 [ 1789.206115] ? vmsplice_type.isra.0+0x160/0x160 [ 1789.210778] ? kasan_check_read+0x11/0x20 [ 1789.214921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1789.220469] ? put_timespec64+0xda/0x140 [ 1789.224524] ? nsecs_to_jiffies+0x30/0x30 [ 1789.228685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1789.233434] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1789.238268] ? do_syscall_64+0x26/0x620 [ 1789.242238] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1789.247645] ? do_syscall_64+0x26/0x620 [ 1789.251651] __x64_sys_vmsplice+0x97/0xf0 [ 1789.255800] do_syscall_64+0xfd/0x620 [ 1789.259599] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1789.264785] RIP: 0033:0x45a679 [ 1789.267973] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1789.286953] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1789.294679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 15:34:25 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x80'}) 15:34:25 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1789.301979] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1789.309276] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1789.316556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1789.323825] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1789.331724] Task in /syz4 killed as a result of limit of /syz4 [ 1789.337926] memory: usage 307200kB, limit 307200kB, failcnt 108 [ 1789.344249] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1789.351042] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1789.357434] Memory cgroup stats for /syz4: cache:88KB rss:285292KB rss_huge:276480KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:285428KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1789.380479] Memory cgroup out of memory: Kill process 26367 (syz-executor.4) score 1160 or sacrifice child [ 1789.392027] Killed process 26367 (syz-executor.4) total-vm:73112kB, anon-rss:16568kB, file-rss:35836kB, shmem-rss:0kB 15:34:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1789.421744] oom_reaper: reaped process 26367 (syz-executor.4), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 1789.535334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29955 comm=syz-executor.5 15:34:25 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1789.603029] 9pnet: Could not find request transport: fdrfdno=0x0000000000000004 15:34:25 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) [ 1789.911290] net_ratelimit: 12 callbacks suppressed [ 1789.911300] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.921413] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.071271] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.076446] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.151657] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.157584] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.163881] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.169381] protocol 88fb is buggy, dev hsr_slave_1 15:34:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000040)='./file0\x00', 0x4001, 0x0) 15:34:26 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:26 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) 15:34:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:34:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:26 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:26 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) [ 1791.111652] protocol 88fb is buggy, dev hsr_slave_0 [ 1791.117353] protocol 88fb is buggy, dev hsr_slave_1 15:34:27 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xff\xff'}) 15:34:27 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0), 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000001c0)={{0x2, @addr=0x6}, "4ff45c9f12146f49d59c1952cff92b6f7b972962315469e5f1dcc4d076c1f740"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cb0"]) 15:34:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) 15:34:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:28 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xff\xff'}) 15:34:28 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:28 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xfd\xff'}) 15:34:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:28 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:29 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xfe\xff'}) 15:34:29 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1793.476787] 9pnet: Insufficient options for proto=fd [ 1793.533907] 9pnet: Insufficient options for proto=fd 15:34:29 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:34:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr="522d55875e64f23a08cc27bdd327786d", 0x3}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:29 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xff\xff'}) 15:34:29 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x90000, 0x0) accept$ax25(r1, &(0x7f0000000600)={{0x3, @default}, [@default, @bcast, @bcast, @rose, @rose, @remote, @default, @default]}, &(0x7f0000000680)=0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendmsg$nfc_llcp(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x5, 0x40, 0x8, "a67145d80d51e00be2091302008090d72340a0d559ef733c001768ce8c5ef07990868f94f4416d1ad8ad20093f90cf542e1368ed9485e6412eb94c6f1e6896", 0x1e}, 0x60, &(0x7f0000000140)=[{&(0x7f00000001c0)="3390e02893c21851939ef71c542e337bf771c2747cca85334b185eba2f50e4b1e1c1c5a316f110f66067de39bcea52acb86f5cd1aa1a22b9a67c363e5bde539d8f03c2432cdf16ff41e6cfda3444e69b99c4fd6d157c35cab4f160073e75e1e543b685f6629e57d8673c93103d3694c713dfefb8a1b8efceb4fa20022e7b3134fed57842b16ec7fc1b2786b81026453904207f3587c02f6a1fa1adde84a316c5b7c9b5958ae366", 0xa7}, {&(0x7f0000000280)="3e31f16ff80e7f2f5505aad9edac2afb215be81fbc582e306a473c7762dbbe99dd01d9bc68c475a28301856214543deb8994ff5b6969fafdc70421903a20cce1e8aa51d373436ca958e02277b614cae15393fad82acf62710a74e24a686589bd57f10faa56efb6d8864b79cdade0680636f597078a9533c1923c39ecda4bcf25fd1e41612ca7e4cde243b548c4e79850f9b11909befaa93c70744a68b45e023e4712ee9d802f7af9f6d45577ba", 0xfffffffffffffecb}, {&(0x7f0000000040)="8b42a04e8311216175a3139b4cb5668a4ec55021e51b6fde", 0x18}], 0x3, &(0x7f0000000380)={0x88, 0x104, 0x800, "df3662ee81036a3fd82284a75005959181d22073e43234fd4ada8fff24b252f810e8d926aa7ddfe2a2f89614c43c7bd38f7c33113277f9b8cef425da7db9fe4663975933253cea4a887c984d1451c35d30755a0fbbfe33dd14bdf03bfe4109a96499b46d0f6cf2c4868f1117dbb89301f400d2a6"}, 0x88, 0x48081}, 0x8850) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000500)={{0xf82e05fd9e72f603, 0x0, @descriptor="5817239d0d4eb5c2"}}) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r6 = accept4$bt_l2cap(r3, &(0x7f00000006c0), &(0x7f0000000700)=0xe, 0xc0400) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000740)=""/78, &(0x7f00000007c0)=0x4e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="c3676a391a0f4cb0235db198e3db2dd52df6dff248c30b6ac7a50646e90fb5509b7577a50444b3bf5b2189966dc94e597f35e070d3ca7a83e3d5f26d99ce97cdc4457d1534d2c6dd35824bb4acede68000000000000000e33c070c08a3bd11bb0f60e086a3a324954315"]) 15:34:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0), 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:34:29 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\xff\xff'}) [ 1793.890647] 9pnet: Insufficient options for proto=fd 15:34:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 15:34:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:30 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:30 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@euid_eq={'euid'}}, {@pcr={'pcr', 0x3d, 0x25}}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@obj_role={'obj_role'}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r3}}, {@euid_gt={'euid>', r5}}, {@dont_hash='dont_hash'}, {@obj_role={'obj_role', 0x3d, 'vboxnet1'}}, {@mask={'mask', 0x3d, '^\x00\x00\x00zEXEC'}}]}}) 15:34:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:31 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local}, 0x10) shutdown(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:31 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1795.271255] net_ratelimit: 18 callbacks suppressed [ 1795.271264] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.281428] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.340092] syz-executor.4 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 1795.353429] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1795.359439] CPU: 1 PID: 30883 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1795.367251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.376624] Call Trace: [ 1795.379237] dump_stack+0x197/0x210 [ 1795.382893] dump_header+0x15e/0xa55 [ 1795.382915] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1795.382931] ? ___ratelimit+0x60/0x595 [ 1795.382947] ? do_raw_spin_unlock+0x178/0x270 [ 1795.382964] oom_kill_process.cold+0x10/0x6ef [ 1795.382985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.410380] ? task_will_free_mem+0x139/0x6e0 [ 1795.414905] out_of_memory+0x362/0x1330 [ 1795.418898] ? lock_downgrade+0x880/0x880 [ 1795.423041] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1795.428145] ? oom_killer_disable+0x280/0x280 [ 1795.432710] ? find_held_lock+0x35/0x130 [ 1795.436783] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1795.441642] ? memcg_event_wake+0x230/0x230 [ 1795.446011] ? do_raw_spin_unlock+0x178/0x270 [ 1795.450498] ? _raw_spin_unlock+0x2d/0x50 [ 1795.454656] try_charge+0xec5/0x1490 [ 1795.458378] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1795.463308] ? lock_downgrade+0x880/0x880 [ 1795.467462] ? kasan_check_read+0x11/0x20 [ 1795.471623] memcg_kmem_charge_memcg+0x83/0x170 [ 1795.476291] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1795.480779] ? __isolate_free_page+0x4c0/0x4c0 [ 1795.485428] memcg_kmem_charge+0x13b/0x370 [ 1795.489678] __alloc_pages_nodemask+0x3c3/0x750 [ 1795.494349] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1795.499360] ? copyin+0xb5/0x100 [ 1795.502716] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1795.507729] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1795.513281] alloc_pages_current+0x107/0x210 [ 1795.517706] pipe_write+0xa5f/0xfb0 [ 1795.521948] __vfs_write+0x587/0x810 [ 1795.525656] ? kernel_read+0x120/0x120 [ 1795.529557] ? selinux_file_permission+0x92/0x550 [ 1795.534422] ? security_file_permission+0x89/0x230 [ 1795.539369] ? rw_verify_area+0x118/0x360 [ 1795.543529] vfs_write+0x20c/0x560 [ 1795.547073] ksys_write+0x14f/0x2d0 [ 1795.550709] ? __ia32_sys_read+0xb0/0xb0 [ 1795.554775] ? do_syscall_64+0x26/0x620 [ 1795.558763] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.564242] ? do_syscall_64+0x26/0x620 [ 1795.568255] __x64_sys_write+0x73/0xb0 [ 1795.572144] do_syscall_64+0xfd/0x620 [ 1795.575963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.581179] RIP: 0033:0x45a679 [ 1795.584389] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1795.603294] RSP: 002b:00007f09398b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1795.611026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 1795.618310] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 1795.625618] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1795.632996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398b36d4 [ 1795.640286] R13: 00000000004c7969 R14: 00000000004e4950 R15: 00000000ffffffff [ 1795.647960] Task in /syz4 killed as a result of limit of /syz4 [ 1795.654060] memory: usage 307168kB, limit 307200kB, failcnt 164 [ 1795.660125] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1795.666996] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1795.673189] Memory cgroup stats for /syz4: cache:88KB rss:282944KB rss_huge:274432KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:283144KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1795.694770] Memory cgroup out of memory: Kill process 24117 (syz-executor.4) score 1160 or sacrifice child [ 1795.706137] Killed process 24117 (syz-executor.4) total-vm:72980kB, anon-rss:16560kB, file-rss:35840kB, shmem-rss:0kB [ 1795.728246] oom_reaper: reaped process 24117 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 15:34:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r1 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r1, 0x5435, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(0xffffffffffffffff, r2) bind$netlink(r3, &(0x7f00000000c0), 0xc) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1796.151303] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.156508] protocol 88fb is buggy, dev hsr_slave_1 15:34:32 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)) r0 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d21d5ef31bf2350d2ceaa69b256f83f41ac2d0b6566646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000100)={0xe, 0x1ff, {0x55, 0x7ff, 0x1f, {0x7, 0x5}, {0x20, 0x3}, @period={0x5c, 0x80, 0x41, 0xfff, 0x0, {0x20, 0x40, 0x3, 0x1d}, 0x3, &(0x7f00000000c0)=[0xc5, 0x1, 0xd9]}}, {0x57, 0x4ff, 0x8000, {0x5, 0xff}, {0x9, 0x20}, @ramp={0x7ff, 0xa41b, {0x3f, 0x1, 0xae, 0x2}}}}) 15:34:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:32 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1796.312050] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.317711] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.391274] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.396466] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.401836] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.407039] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.501976] 9pnet: Could not find request transport: !Õï1¿#PÒΪi²Vø?A¬- efdno=0x0000000000000008 15:34:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:32 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:33 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:33 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c2289db58b1154e8408eb2ef3e5023b96e7bd7b801940036ae19e0c9e1396b591070ce1e8ca6b831ad43152c047bfd7d2a72cc87c10d6d3934432bc4d0b6e50d2"]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) syz_open_pts(r2, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="5b7674561f5306c4d1e4cae29f4c39a95e13c623a0d0b9eb777868d447f8192dd28f26d09be98230be840608e12939dbe450e67f67282b513d95fd2fd0c1beeb266651e415a4e732a7ed2b426dfc144d1dab59cb601393df402d20ec3beeb7b5ff7ad3a91ffa76415b8b86071a0acac32684f1f4676e4479812b3e51e2a7fdc2b81165f152c30234c43304f56434a666b622dbd2e58660f581749b2be5c70f51ed6c49bfe28e176a7b959b74250c97dd28a4b993108eef8f25b43f7acb01f56905e9e4b3ec6307db51931113687ed727921e04faf9dab8096d84", 0xda}, {&(0x7f00000000c0)="17ed04c95727ff551315287b3c62fb5b13802da9e8caa224410f05001b080d105809acc02a0e10991db29f5f6dc073449049912ac10e501f0f8ad92fa8397cd595d555079ed46545a735b8797a1e6950c1f10851c2e12458dc821d18aa829a582a0ca821fdaff12d8d1289dee60bc61599ef184e2186b3271766ca83b34df8458055d81b558fcb36c7d6e53eb1caa922b327ddc045d96739d9082bd65f48364d2ffeb1b64b260253bc0a5121bcd0e510843392dcdd86ec40526f5d", 0xbb}, {&(0x7f0000000380)="3cf3409a044ae4bc631b7b8151171a9e8c750cc7780a91182261b25939040418ed10adebedc4eddb5c6dbd2f3de971c0a9604939144f61356a8e6e7299385c42d60b4e8f1c6505f6bde6bb18995e780b041596ccfa1702231dda28804b6f9be64f8e897a8fb2f8d31f6fde03eaf19f30efba4af884c377667409d19dda35784c9cdbd32ba2f3ead0", 0x88}, {&(0x7f00000004c0)="2a9b18578b2694109b09195d6c35fe18b589796163ac411eb52852a46eb09783165561fc90a7ecf1d97597cbf0bda611b5e0c4a6fc732050744a8fc377a6072ddc38af4d96ed447e29b3ebe179309cefb24e5da78512a13ce0fa6ce7157450bb0ac7b0dd68295f870ae2029dcb8d2a7e0d47e71feca1a6cf6f5af92ec29c902885174b3ffdf638078db7afa4af1d76af5ac27e3807da7a2dc2c7f2de3a371cd8f3b5c48a0b33f8da711171b6e243cbb237b16828c3a3505d0cf225b553872d91a337cc3c51a70ab1b4463f41d8db4347", 0xd0}, {&(0x7f0000000040)="faa4f1cb25e8ba6661c205acf193", 0xe}, {&(0x7f00000002c0)="0f0b5c2666a2346b8ce4ad", 0xb}, {&(0x7f0000000300)="9f301afcf0b0b4fe6da72b53d710adee6e468cb51bb2fbbdc0f8e5c97441da971f0a00473d811565", 0x28}], 0x7, 0x7) 15:34:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:33 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:34 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:34 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:34 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:34:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) syz_open_pts(r2, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x70040b85a38d73bb) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x1, 0x0, 0x4, 0xff, 0x1, 0x5}, {0x80000007, 0x0, 0x2, 0x7f, 0x0, 0xa8, 0x6}, {0x0, 0x8, 0x2, 0x2, 0x20, 0x2, 0x7}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="2c0004002f9ff7479406e66d6a00158300a2e05bcc1b98fbcdc8af", @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) 15:34:35 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:35 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:35 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:36 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x1) 15:34:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x200, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000100)={0x5, "47536ea1aa0ccf85df2504c4a0a4009e9816a5984eb7656a8f64577bca3325c8", 0x7, 0x3}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x7, 0x8, 0x3089, 0xa000, r0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)) syz_open_pts(r6, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x1ff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1800.472649] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.479537] protocol 88fb is buggy, dev hsr_slave_1 15:34:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:36 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1800.551687] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.557524] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.563691] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.563969] protocol 88fb is buggy, dev hsr_slave_1 15:34:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:37 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:34:37 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440), 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1ee0224536193a5177dab77ac91c635a28dafc66a0ff7ba2dd21dd9e46ef4854644150e644dcbd62d9025baf5856bdc70af12f2ca5d9e2e59252b1c980ba11d8f33a144ee0e3f0a302c2081a844ab99052bbc3f7475ba8272cc39016a8ffe6989bbf3df763a9c0c2161f31570d41bfc1e1d2fa87a19a03f3a5bbaa46659f2d3e8a7038ea9eff06e921ff90aed0f1bb611890f26494a7a50fca2c8f404ae744039c7237a81eaaeaadc103c69c1c295a516ba4819e742015aad36a7856db4c94be61194890bd62dfdbb4f0503e1b0f67c38b9a16c60baf981680815c0cc7981e06977ddcc6d52636e4ee42dce893bcbdef5f96f3c21082d72fd4ce37e8cc16fe796729d841"]) [ 1801.511283] protocol 88fb is buggy, dev hsr_slave_0 [ 1801.516423] protocol 88fb is buggy, dev hsr_slave_1 15:34:37 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140), 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:34:38 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:38 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x1, 0x0, 0x2, {0x8001, 0x1, 0x3, 0x101}}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x541b, &(0x7f0000000100)) ftruncate(r2, 0x7f) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r4 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 15:34:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:34:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1802.402165] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1802.415863] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1802.421878] CPU: 0 PID: 31836 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1802.429692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.439062] Call Trace: [ 1802.441677] dump_stack+0x197/0x210 [ 1802.445324] dump_header+0x15e/0xa55 [ 1802.449052] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.454317] ? ___ratelimit+0x60/0x595 [ 1802.458220] ? do_raw_spin_unlock+0x178/0x270 [ 1802.462735] oom_kill_process.cold+0x10/0x6ef [ 1802.467250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.472799] ? task_will_free_mem+0x139/0x6e0 [ 1802.477316] out_of_memory+0x362/0x1330 [ 1802.481305] ? lock_downgrade+0x880/0x880 [ 1802.485565] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1802.490678] ? oom_killer_disable+0x280/0x280 [ 1802.495184] ? find_held_lock+0x35/0x130 [ 1802.499271] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1802.504133] ? memcg_event_wake+0x230/0x230 [ 1802.508469] ? do_raw_spin_unlock+0x178/0x270 [ 1802.512978] ? _raw_spin_unlock+0x2d/0x50 [ 1802.517151] try_charge+0xec5/0x1490 [ 1802.520885] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1802.525921] ? lock_downgrade+0x880/0x880 [ 1802.530205] ? kasan_check_read+0x11/0x20 [ 1802.534396] memcg_kmem_charge_memcg+0x83/0x170 [ 1802.539091] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1802.543613] ? __isolate_free_page+0x4c0/0x4c0 [ 1802.548230] memcg_kmem_charge+0x13b/0x370 15:34:38 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x80'}) [ 1802.552488] __alloc_pages_nodemask+0x3c3/0x750 [ 1802.557181] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1802.562235] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1802.566837] ? trace_hardirqs_on+0x67/0x220 [ 1802.571180] copy_process.part.0+0x3e0/0x7a30 [ 1802.575698] ? SOFTIRQ_verbose+0x10/0x10 [ 1802.579768] ? __free_object+0xe2/0x1f0 [ 1802.583758] ? find_held_lock+0x35/0x130 [ 1802.587835] ? __free_object+0xe2/0x1f0 [ 1802.591825] ? debug_object_free+0x1f4/0x430 [ 1802.596254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.601367] ? __free_object+0xe2/0x1f0 [ 1802.605356] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.610482] ? __cleanup_sighand+0x70/0x70 [ 1802.614732] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.619859] ? __free_object+0xe2/0x1f0 [ 1802.623846] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.628971] ? __hrtimer_init+0xe1/0x250 [ 1802.633068] _do_fork+0x257/0xfd0 [ 1802.636544] ? fork_idle+0x1d0/0x1d0 [ 1802.640283] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 1802.646190] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1802.650964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1802.655745] ? do_syscall_64+0x26/0x620 [ 1802.659746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1802.665137] ? do_syscall_64+0x26/0x620 [ 1802.669136] __x64_sys_clone+0xbf/0x150 [ 1802.673129] do_syscall_64+0xfd/0x620 [ 1802.676950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1802.682145] RIP: 0033:0x45d049 15:34:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) [ 1802.685376] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1802.704295] RSP: 002b:00007ffeca537a48 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1802.712033] RAX: ffffffffffffffda RBX: 00007f0939871700 RCX: 000000000045d049 [ 1802.719460] RDX: 00007f09398719d0 RSI: 00007f0939870db0 RDI: 00000000003d0f00 [ 1802.727071] RBP: 00007ffeca537c60 R08: 00007f0939871700 R09: 00007f0939871700 [ 1802.734366] R10: 00007f09398719d0 R11: 0000000000000202 R12: 0000000000000000 [ 1802.741666] R13: 00007ffeca537aff R14: 0000000000020000 R15: 00000000028b6db0 [ 1802.750861] Task in /syz4 killed as a result of limit of /syz4 [ 1802.756953] memory: usage 307172kB, limit 307200kB, failcnt 193 [ 1802.763107] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1802.769894] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1802.776125] Memory cgroup stats for /syz4: cache:88KB rss:280844KB rss_huge:272384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:280836KB inactive_file:0KB active_file:8KB unevictable:0KB [ 1802.797362] Memory cgroup out of memory: Kill process 23770 (syz-executor.4) score 1160 or sacrifice child [ 1802.798897] Killed process 23770 (syz-executor.4) total-vm:72980kB, anon-rss:16560kB, file-rss:35832kB, shmem-rss:0kB [ 1802.823299] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1802.838123] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1802.843634] CPU: 0 PID: 31836 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1802.848793] oom_reaper: reaped process 23770 (syz-executor.4), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 1802.851443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.851449] Call Trace: [ 1802.851478] dump_stack+0x197/0x210 [ 1802.851499] dump_header+0x15e/0xa55 [ 1802.851517] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.851532] ? ___ratelimit+0x60/0x595 [ 1802.851545] ? do_raw_spin_unlock+0x178/0x270 [ 1802.851564] oom_kill_process.cold+0x10/0x6ef [ 1802.851581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.851593] ? task_will_free_mem+0x139/0x6e0 [ 1802.851622] out_of_memory+0x362/0x1330 [ 1802.913227] ? lock_downgrade+0x880/0x880 [ 1802.917395] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1802.922516] ? oom_killer_disable+0x280/0x280 [ 1802.927032] ? find_held_lock+0x35/0x130 [ 1802.931124] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1802.935984] ? memcg_event_wake+0x230/0x230 [ 1802.940324] ? do_raw_spin_unlock+0x178/0x270 [ 1802.944834] ? _raw_spin_unlock+0x2d/0x50 [ 1802.949005] try_charge+0xec5/0x1490 [ 1802.952748] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1802.957621] ? lock_downgrade+0x880/0x880 [ 1802.961787] ? kasan_check_read+0x11/0x20 [ 1802.965960] memcg_kmem_charge_memcg+0x83/0x170 [ 1802.970685] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1802.975205] ? __isolate_free_page+0x4c0/0x4c0 [ 1802.979816] memcg_kmem_charge+0x13b/0x370 [ 1802.984077] __alloc_pages_nodemask+0x3c3/0x750 [ 1802.988774] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1802.993996] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1802.998596] ? trace_hardirqs_on+0x67/0x220 [ 1803.002954] copy_process.part.0+0x3e0/0x7a30 [ 1803.007492] ? SOFTIRQ_verbose+0x10/0x10 [ 1803.011576] ? __free_object+0xe2/0x1f0 [ 1803.015579] ? find_held_lock+0x35/0x130 [ 1803.019666] ? __free_object+0xe2/0x1f0 [ 1803.023660] ? debug_object_free+0x1f4/0x430 [ 1803.028093] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1803.033495] ? __free_object+0xe2/0x1f0 [ 1803.037488] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1803.042629] ? __cleanup_sighand+0x70/0x70 [ 1803.046884] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 15:34:39 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "138633a08d77"}, 0x7, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1803.052386] ? __free_object+0xe2/0x1f0 [ 1803.056374] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1803.061504] ? __hrtimer_init+0xe1/0x250 [ 1803.065624] _do_fork+0x257/0xfd0 [ 1803.069100] ? fork_idle+0x1d0/0x1d0 [ 1803.072828] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 1803.078735] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1803.083512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1803.088288] ? do_syscall_64+0x26/0x620 [ 1803.092281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.097666] ? do_syscall_64+0x26/0x620 [ 1803.101662] __x64_sys_clone+0xbf/0x150 [ 1803.105658] do_syscall_64+0xfd/0x620 [ 1803.109479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.114708] RIP: 0033:0x45d049 [ 1803.117917] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1803.136838] RSP: 002b:00007ffeca537a48 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1803.144567] RAX: ffffffffffffffda RBX: 00007f0939871700 RCX: 000000000045d049 [ 1803.151968] RDX: 00007f09398719d0 RSI: 00007f0939870db0 RDI: 00000000003d0f00 [ 1803.151977] RBP: 00007ffeca537c60 R08: 00007f0939871700 R09: 00007f0939871700 [ 1803.151985] R10: 00007f09398719d0 R11: 0000000000000202 R12: 0000000000000000 [ 1803.151992] R13: 00007ffeca537aff R14: 0000000000020000 R15: 00000000028b6db0 [ 1803.152419] Task in /syz4 killed as a result of limit of /syz4 [ 1803.188908] memory: usage 290444kB, limit 307200kB, failcnt 203 [ 1803.196351] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1803.203196] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1803.209436] Memory cgroup stats for /syz4: cache:88KB rss:264276KB rss_huge:256000KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264316KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1803.230348] Memory cgroup out of memory: Kill process 30936 (syz-executor.4) score 1147 or sacrifice child [ 1803.241750] Killed process 30936 (syz-executor.4) total-vm:72980kB, anon-rss:12464kB, file-rss:35804kB, shmem-rss:0kB [ 1803.258526] oom_reaper: reaped process 30936 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 15:34:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140), 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:40 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x02'}) 15:34:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:40 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 15:34:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:40 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x04'}) 15:34:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:40 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\b'}) 15:34:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140), 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:41 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00a'}) 15:34:41 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xd5, 0x401}, 0xc) syz_open_pts(r2, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000001c0)=""/209) 15:34:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x400000, 0x3) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:41 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x8f'}) [ 1805.671311] net_ratelimit: 18 callbacks suppressed [ 1805.671321] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.681442] protocol 88fb is buggy, dev hsr_slave_1 15:34:42 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x9d'}) 15:34:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) [ 1806.552867] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.558563] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.740247] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.745424] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.791289] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.796471] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.802262] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.807355] protocol 88fb is buggy, dev hsr_slave_1 15:34:42 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w_dno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:34:42 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xa0'}) 15:34:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a2c290000ac025352b6353f2b68cb57cef7b200000000ea3370731b40", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_RMID(r3, 0x0) link(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x40}) 15:34:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:43 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00]'}) 15:34:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$void(r0, 0x5450) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:45 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x006'}) 15:34:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616fd0ac5105e813eae89f6664", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 15:34:45 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\\'}) 15:34:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:45 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)) syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) 15:34:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 15:34:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:49 executing program 5: 15:34:49 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:49 executing program 5: 15:34:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 15:34:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xea\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt6_stats\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x3) 15:34:50 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 15:34:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:51 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:34:51 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) 15:34:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:34:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:52 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\x01'}) [ 1816.072015] net_ratelimit: 18 callbacks suppressed [ 1816.072106] protocol 88fb is buggy, dev hsr_slave_0 [ 1816.082334] protocol 88fb is buggy, dev hsr_slave_1 15:34:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:52 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xa0'}) 15:34:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1816.961278] protocol 88fb is buggy, dev hsr_slave_0 [ 1816.966942] protocol 88fb is buggy, dev hsr_slave_1 15:34:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:34:53 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_getres(0x0, 0x0) [ 1817.111949] protocol 88fb is buggy, dev hsr_slave_0 [ 1817.117759] protocol 88fb is buggy, dev hsr_slave_1 [ 1817.192042] protocol 88fb is buggy, dev hsr_slave_0 [ 1817.197692] protocol 88fb is buggy, dev hsr_slave_1 [ 1817.204113] protocol 88fb is buggy, dev hsr_slave_0 [ 1817.209933] protocol 88fb is buggy, dev hsr_slave_1 15:34:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:53 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 15:34:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:34:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1ea3, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) shutdown(0xffffffffffffffff, 0x0) accept4(r3, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffdc4, 0x42, 0x0, 0x800e00521) shutdown(r1, 0x0) 15:34:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1817.901897] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1817.913381] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1817.920235] CPU: 0 PID: 801 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1817.927885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1817.937253] Call Trace: [ 1817.939868] dump_stack+0x197/0x210 [ 1817.943561] dump_header+0x15e/0xa55 [ 1817.948000] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1817.953221] ? ___ratelimit+0x60/0x595 [ 1817.957125] ? do_raw_spin_unlock+0x178/0x270 [ 1817.961660] oom_kill_process.cold+0x10/0x6ef [ 1817.966179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1817.971741] ? task_will_free_mem+0x139/0x6e0 [ 1817.976264] out_of_memory+0x362/0x1330 [ 1817.980285] ? lock_downgrade+0x880/0x880 [ 1817.984452] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1817.989606] ? oom_killer_disable+0x280/0x280 [ 1817.994118] ? find_held_lock+0x35/0x130 [ 1817.998247] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1818.003115] ? memcg_event_wake+0x230/0x230 [ 1818.008197] ? do_raw_spin_unlock+0x178/0x270 [ 1818.013355] ? _raw_spin_unlock+0x2d/0x50 [ 1818.017619] try_charge+0xec5/0x1490 [ 1818.021366] ? lock_downgrade+0x880/0x880 [ 1818.025539] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1818.030483] ? rcu_read_unlock+0x33/0x60 [ 1818.034754] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1818.039795] ? wp_page_copy+0xedd/0x16a0 [ 1818.043889] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 15:34:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1818.050288] mem_cgroup_try_charge+0x259/0x6b0 [ 1818.054922] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1818.060480] wp_page_copy+0x430/0x16a0 [ 1818.064395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1818.069960] ? follow_pfn+0x2a0/0x2a0 [ 1818.073808] ? do_raw_spin_unlock+0x178/0x270 [ 1818.078322] do_wp_page+0x57d/0x10b0 [ 1818.082260] ? lock_acquire+0x16f/0x3f0 [ 1818.086262] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1818.091034] ? kasan_check_write+0x14/0x20 [ 1818.095295] ? do_raw_spin_lock+0xc8/0x240 [ 1818.099566] __handle_mm_fault+0x2305/0x3f80 [ 1818.104001] ? copy_page_range+0x2030/0x2030 [ 1818.108445] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1818.113335] handle_mm_fault+0x1b5/0x690 [ 1818.117594] __do_page_fault+0x62a/0xe90 [ 1818.122674] ? vmalloc_fault+0x740/0x740 [ 1818.126777] ? trace_hardirqs_off_caller+0x65/0x220 [ 1818.134176] ? SOFTIRQ_verbose+0x10/0x10 [ 1818.138700] do_page_fault+0x71/0x57d [ 1818.142524] page_fault+0x1e/0x30 [ 1818.146073] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1818.151968] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1818.171064] RSP: 0018:ffff88809dfa7ab8 EFLAGS: 00010206 [ 1818.176445] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1818.183731] RDX: 0000000000001000 RSI: ffff88808897ab00 RDI: 0000000020274000 [ 1818.191011] RBP: ffff88809dfa7af0 R08: ffffed101112f600 R09: 0000000000000000 [ 1818.198312] R10: ffffed101112f5ff R11: ffff88808897afff R12: 0000000020273500 [ 1818.205592] R13: ffff88808897a000 R14: 0000000020274500 R15: 00007ffffffff000 [ 1818.213223] ? copyout+0xe2/0x100 [ 1818.216711] copy_page_to_iter+0x329/0xd50 [ 1818.220970] ? kill_fasync+0x323/0x4a0 [ 1818.224889] pipe_to_user+0xb4/0x170 [ 1818.228641] __splice_from_pipe+0x391/0x7d0 [ 1818.232984] ? iter_to_pipe+0x660/0x660 [ 1818.236985] do_vmsplice.part.0+0x249/0x2b0 [ 1818.241321] ? do_tee+0x820/0x820 [ 1818.244902] ? import_iovec+0x233/0x3e0 [ 1818.249074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1818.254634] __do_sys_vmsplice+0x1b9/0x210 [ 1818.259672] ? vmsplice_type.isra.0+0x160/0x160 [ 1818.264363] ? kasan_check_read+0x11/0x20 [ 1818.269170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1818.274830] ? put_timespec64+0xda/0x140 [ 1818.278907] ? nsecs_to_jiffies+0x30/0x30 [ 1818.283088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1818.287862] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1818.292645] ? do_syscall_64+0x26/0x620 [ 1818.296635] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1818.302035] ? do_syscall_64+0x26/0x620 [ 1818.306030] __x64_sys_vmsplice+0x97/0xf0 [ 1818.310193] do_syscall_64+0xfd/0x620 [ 1818.314015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1818.319213] RIP: 0033:0x45a679 [ 1818.322429] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1818.341520] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1818.349295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1818.356676] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1818.363958] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1818.371238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1818.379569] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1818.389723] Task in /syz4 killed as a result of limit of /syz4 [ 1818.396637] memory: usage 307200kB, limit 307200kB, failcnt 232 15:34:54 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1818.402752] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1818.409543] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1818.415742] Memory cgroup stats for /syz4: cache:88KB rss:277412KB rss_huge:268288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:277576KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1818.436635] Memory cgroup out of memory: Kill process 31048 (syz-executor.4) score 1140 or sacrifice child [ 1818.436693] Killed process 31048 (syz-executor.4) total-vm:72980kB, anon-rss:10416kB, file-rss:35804kB, shmem-rss:0kB [ 1818.459562] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1818.471940] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1818.477363] CPU: 0 PID: 801 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1818.484999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.485341] oom_reaper: reaped process 31048 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1818.494378] Call Trace: [ 1818.494405] dump_stack+0x197/0x210 [ 1818.494424] dump_header+0x15e/0xa55 [ 1818.494441] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1818.494455] ? ___ratelimit+0x60/0x595 [ 1818.494467] ? do_raw_spin_unlock+0x178/0x270 [ 1818.494484] oom_kill_process.cold+0x10/0x6ef [ 1818.494502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1818.494518] ? task_will_free_mem+0x139/0x6e0 [ 1818.543787] out_of_memory+0x362/0x1330 [ 1818.547784] ? lock_downgrade+0x880/0x880 [ 1818.552042] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1818.557168] ? oom_killer_disable+0x280/0x280 [ 1818.561676] ? find_held_lock+0x35/0x130 [ 1818.565769] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1818.570645] ? memcg_event_wake+0x230/0x230 [ 1818.574989] ? do_raw_spin_unlock+0x178/0x270 [ 1818.579525] ? _raw_spin_unlock+0x2d/0x50 [ 1818.583699] try_charge+0xec5/0x1490 [ 1818.587433] ? lock_downgrade+0x880/0x880 [ 1818.591780] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1818.596640] ? rcu_read_unlock+0x33/0x60 [ 1818.600722] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1818.605576] ? wp_page_copy+0xedd/0x16a0 [ 1818.609680] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1818.609706] mem_cgroup_try_charge+0x259/0x6b0 [ 1818.620345] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1818.625305] wp_page_copy+0x430/0x16a0 [ 1818.629215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1818.634777] ? follow_pfn+0x2a0/0x2a0 [ 1818.638599] ? do_raw_spin_unlock+0x178/0x270 [ 1818.643117] do_wp_page+0x57d/0x10b0 [ 1818.647031] ? lock_acquire+0x16f/0x3f0 [ 1818.651029] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1818.655713] ? kasan_check_write+0x14/0x20 [ 1818.659961] ? do_raw_spin_lock+0xc8/0x240 [ 1818.664220] __handle_mm_fault+0x2305/0x3f80 [ 1818.669808] ? copy_page_range+0x2030/0x2030 [ 1818.674255] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1818.678949] handle_mm_fault+0x1b5/0x690 [ 1818.683215] __do_page_fault+0x62a/0xe90 [ 1818.687302] ? vmalloc_fault+0x740/0x740 [ 1818.691389] ? trace_hardirqs_off_caller+0x65/0x220 [ 1818.696624] ? SOFTIRQ_verbose+0x10/0x10 [ 1818.700708] do_page_fault+0x71/0x57d [ 1818.704531] page_fault+0x1e/0x30 [ 1818.708002] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1818.708015] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1818.708026] RSP: 0018:ffff88809dfa7ab8 EFLAGS: 00010206 [ 1818.739014] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1818.746913] RDX: 0000000000001000 RSI: ffff88808897ab00 RDI: 0000000020274000 [ 1818.754304] RBP: ffff88809dfa7af0 R08: ffffed101112f600 R09: 0000000000000000 [ 1818.761796] R10: ffffed101112f5ff R11: ffff88808897afff R12: 0000000020273500 [ 1818.769085] R13: ffff88808897a000 R14: 0000000020274500 R15: 00007ffffffff000 [ 1818.776409] ? copyout+0xe2/0x100 [ 1818.779893] copy_page_to_iter+0x329/0xd50 [ 1818.784246] ? kill_fasync+0x323/0x4a0 [ 1818.789298] pipe_to_user+0xb4/0x170 [ 1818.793044] __splice_from_pipe+0x391/0x7d0 [ 1818.797393] ? iter_to_pipe+0x660/0x660 [ 1818.801602] do_vmsplice.part.0+0x249/0x2b0 [ 1818.805983] ? do_tee+0x820/0x820 [ 1818.809456] ? import_iovec+0x233/0x3e0 [ 1818.813458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1818.819112] __do_sys_vmsplice+0x1b9/0x210 [ 1818.823481] ? vmsplice_type.isra.0+0x160/0x160 [ 1818.823504] ? kasan_check_read+0x11/0x20 [ 1818.823525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1818.823537] ? put_timespec64+0xda/0x140 [ 1818.823553] ? nsecs_to_jiffies+0x30/0x30 [ 1818.823581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1818.823595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1818.823609] ? do_syscall_64+0x26/0x620 [ 1818.823627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1818.865120] ? do_syscall_64+0x26/0x620 [ 1818.865146] __x64_sys_vmsplice+0x97/0xf0 [ 1818.865163] do_syscall_64+0xfd/0x620 [ 1818.865183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1818.865195] RIP: 0033:0x45a679 [ 1818.865209] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1818.865216] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1818.865232] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1818.905640] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1818.905649] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1818.905656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1818.905664] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1818.907465] Task in /syz4 killed as a result of limit of /syz4 [ 1818.957560] memory: usage 296584kB, limit 307200kB, failcnt 238 [ 1818.963715] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1818.970481] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1818.976700] Memory cgroup stats for /syz4: cache:88KB rss:267160KB rss_huge:258048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:267204KB inactive_file:0KB active_file:4KB unevictable:0KB 15:34:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:34:54 executing program 5: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0, 0x1f1}, {0x0}, {0x0}, {0x0, 0xff86}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet6(0x1c, 0x3, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r2, 0x0) 15:34:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000240)=""/254) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) [ 1818.997657] Memory cgroup out of memory: Kill process 26204 (syz-executor.4) score 1140 or sacrifice child [ 1819.007586] Killed process 26204 (syz-executor.4) total-vm:72980kB, anon-rss:10416kB, file-rss:35800kB, shmem-rss:0kB [ 1819.026517] oom_reaper: reaped process 26204 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 15:34:55 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1819.277239] ptrace attach of ""[792] was attempted by "/root/syz-executor.4"[826] 15:34:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 15:34:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:55 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:55 executing program 5: 15:34:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:55 executing program 5: 15:34:55 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1819.804409] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1819.816005] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1819.821503] CPU: 1 PID: 962 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1819.829150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.838784] Call Trace: [ 1819.841401] dump_stack+0x197/0x210 [ 1819.845147] dump_header+0x15e/0xa55 [ 1819.848887] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1819.854011] ? ___ratelimit+0x60/0x595 [ 1819.857916] ? do_raw_spin_unlock+0x178/0x270 [ 1819.862761] oom_kill_process.cold+0x10/0x6ef [ 1819.867284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1819.872857] ? task_will_free_mem+0x139/0x6e0 [ 1819.872883] out_of_memory+0x362/0x1330 [ 1819.872903] ? lock_downgrade+0x880/0x880 [ 1819.872925] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1819.881403] ? oom_killer_disable+0x280/0x280 [ 1819.881418] ? find_held_lock+0x35/0x130 [ 1819.881446] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1819.881461] ? memcg_event_wake+0x230/0x230 [ 1819.881483] ? do_raw_spin_unlock+0x178/0x270 [ 1819.914808] ? _raw_spin_unlock+0x2d/0x50 [ 1819.920466] try_charge+0xec5/0x1490 [ 1819.924215] ? lock_downgrade+0x880/0x880 [ 1819.928395] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1819.933264] ? rcu_read_unlock+0x33/0x60 [ 1819.937373] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1819.942253] ? wp_page_copy+0xedd/0x16a0 [ 1819.946456] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1819.952664] mem_cgroup_try_charge+0x259/0x6b0 [ 1819.957280] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1819.962232] wp_page_copy+0x430/0x16a0 [ 1819.966146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1819.971720] ? follow_pfn+0x2a0/0x2a0 [ 1819.975524] ? do_raw_spin_unlock+0x178/0x270 [ 1819.980031] do_wp_page+0x57d/0x10b0 [ 1819.984025] ? lock_acquire+0x16f/0x3f0 [ 1819.988094] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1819.992756] ? kasan_check_write+0x14/0x20 [ 1819.997000] ? do_raw_spin_lock+0xc8/0x240 [ 1820.001580] __handle_mm_fault+0x2305/0x3f80 [ 1820.005984] ? copy_page_range+0x2030/0x2030 [ 1820.010400] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1820.015246] handle_mm_fault+0x1b5/0x690 [ 1820.019305] __do_page_fault+0x62a/0xe90 [ 1820.023399] ? vmalloc_fault+0x740/0x740 [ 1820.027465] ? trace_hardirqs_off_caller+0x65/0x220 [ 1820.032476] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.036550] do_page_fault+0x71/0x57d [ 1820.040354] page_fault+0x1e/0x30 [ 1820.043803] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1820.049679] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1820.069281] RSP: 0018:ffff888052ccfab8 EFLAGS: 00010206 [ 1820.074640] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1820.081902] RDX: 0000000000001000 RSI: ffff888095509b00 RDI: 000000002069c000 [ 1820.089248] RBP: ffff888052ccfaf0 R08: ffffed1012aa1400 R09: 0000000000000000 [ 1820.096510] R10: ffffed1012aa13ff R11: ffff888095509fff R12: 000000002069b500 [ 1820.103869] R13: ffff888095509000 R14: 000000002069c500 R15: 00007ffffffff000 [ 1820.111647] ? copyout+0xe2/0x100 [ 1820.115100] copy_page_to_iter+0x329/0xd50 [ 1820.119328] ? kill_fasync+0x323/0x4a0 [ 1820.123219] pipe_to_user+0xb4/0x170 [ 1820.126953] __splice_from_pipe+0x391/0x7d0 [ 1820.131275] ? iter_to_pipe+0x660/0x660 [ 1820.135335] do_vmsplice.part.0+0x249/0x2b0 [ 1820.139649] ? do_tee+0x820/0x820 [ 1820.143094] ? import_iovec+0x233/0x3e0 [ 1820.147088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1820.152727] __do_sys_vmsplice+0x1b9/0x210 [ 1820.156954] ? vmsplice_type.isra.0+0x160/0x160 [ 1820.161627] ? kasan_check_read+0x11/0x20 [ 1820.165768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1820.171457] ? put_timespec64+0xda/0x140 [ 1820.175521] ? nsecs_to_jiffies+0x30/0x30 [ 1820.179678] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.184429] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.189186] ? do_syscall_64+0x26/0x620 [ 1820.193170] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.198523] ? do_syscall_64+0x26/0x620 [ 1820.202578] __x64_sys_vmsplice+0x97/0xf0 [ 1820.206721] do_syscall_64+0xfd/0x620 [ 1820.210514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.215694] RIP: 0033:0x45a679 [ 1820.218879] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1820.237774] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1820.245470] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 15:34:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) 15:34:55 executing program 5: [ 1820.252739] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1820.260010] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1820.267281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1820.274554] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1820.282427] Task in /syz4 killed as a result of limit of /syz4 [ 1820.288457] memory: usage 307148kB, limit 307200kB, failcnt 283 [ 1820.294722] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1820.301605] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1820.307759] Memory cgroup stats for /syz4: cache:88KB rss:277516KB rss_huge:266240KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:277612KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1820.328691] Memory cgroup out of memory: Kill process 826 (syz-executor.4) score 1160 or sacrifice child [ 1820.338469] Killed process 826 (syz-executor.4) total-vm:72980kB, anon-rss:16560kB, file-rss:35848kB, shmem-rss:0kB [ 1820.354451] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1820.365794] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1820.371241] CPU: 1 PID: 962 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1820.378851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.388196] Call Trace: [ 1820.390784] dump_stack+0x197/0x210 [ 1820.394408] dump_header+0x15e/0xa55 [ 1820.398115] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1820.403237] ? ___ratelimit+0x60/0x595 [ 1820.407138] ? do_raw_spin_unlock+0x178/0x270 [ 1820.411638] oom_kill_process.cold+0x10/0x6ef [ 1820.416136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1820.421676] ? task_will_free_mem+0x139/0x6e0 [ 1820.426181] out_of_memory+0x362/0x1330 [ 1820.430249] ? lock_downgrade+0x880/0x880 [ 1820.434390] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1820.439485] ? oom_killer_disable+0x280/0x280 [ 1820.443971] ? find_held_lock+0x35/0x130 [ 1820.448035] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1820.452874] ? memcg_event_wake+0x230/0x230 [ 1820.457194] ? do_raw_spin_unlock+0x178/0x270 [ 1820.461689] ? _raw_spin_unlock+0x2d/0x50 [ 1820.465831] try_charge+0xec5/0x1490 [ 1820.469540] ? lock_downgrade+0x880/0x880 [ 1820.473687] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1820.478524] ? rcu_read_unlock+0x33/0x60 [ 1820.482588] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1820.487418] ? wp_page_copy+0xedd/0x16a0 [ 1820.491478] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1820.497557] mem_cgroup_try_charge+0x259/0x6b0 [ 1820.502148] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1820.507076] wp_page_copy+0x430/0x16a0 [ 1820.510983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1820.516521] ? follow_pfn+0x2a0/0x2a0 [ 1820.520322] ? do_raw_spin_unlock+0x178/0x270 [ 1820.524809] do_wp_page+0x57d/0x10b0 [ 1820.528518] ? lock_acquire+0x16f/0x3f0 [ 1820.532494] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1820.537156] ? kasan_check_write+0x14/0x20 [ 1820.541387] ? do_raw_spin_lock+0xc8/0x240 [ 1820.545622] __handle_mm_fault+0x2305/0x3f80 [ 1820.550028] ? copy_page_range+0x2030/0x2030 [ 1820.554448] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1820.559112] handle_mm_fault+0x1b5/0x690 [ 1820.563183] __do_page_fault+0x62a/0xe90 [ 1820.567250] ? vmalloc_fault+0x740/0x740 [ 1820.571491] ? trace_hardirqs_off_caller+0x65/0x220 [ 1820.576499] ? SOFTIRQ_verbose+0x10/0x10 [ 1820.580564] do_page_fault+0x71/0x57d [ 1820.584359] page_fault+0x1e/0x30 [ 1820.587810] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1820.593698] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1820.612598] RSP: 0018:ffff888052ccfab8 EFLAGS: 00010206 [ 1820.617949] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1820.625221] RDX: 0000000000001000 RSI: ffff888095509b00 RDI: 00000000206c0000 [ 1820.633609] RBP: ffff888052ccfaf0 R08: ffffed1012aa1400 R09: 0000000000000000 [ 1820.640872] R10: ffffed1012aa13ff R11: ffff888095509fff R12: 00000000206bf500 [ 1820.649183] R13: ffff888095509000 R14: 00000000206c0500 R15: 00007ffffffff000 [ 1820.656800] ? copyout+0xe2/0x100 [ 1820.660274] copy_page_to_iter+0x329/0xd50 [ 1820.664521] ? kill_fasync+0x323/0x4a0 [ 1820.668565] pipe_to_user+0xb4/0x170 [ 1820.672285] __splice_from_pipe+0x391/0x7d0 [ 1820.676607] ? iter_to_pipe+0x660/0x660 [ 1820.680583] do_vmsplice.part.0+0x249/0x2b0 [ 1820.684896] ? do_tee+0x820/0x820 [ 1820.688344] ? import_iovec+0x233/0x3e0 [ 1820.692318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1820.698496] __do_sys_vmsplice+0x1b9/0x210 [ 1820.702725] ? vmsplice_type.isra.0+0x160/0x160 [ 1820.707387] ? kasan_check_read+0x11/0x20 [ 1820.711529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1820.717067] ? put_timespec64+0xda/0x140 [ 1820.721119] ? nsecs_to_jiffies+0x30/0x30 [ 1820.725272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.730021] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.734775] ? do_syscall_64+0x26/0x620 [ 1820.738739] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.744105] ? do_syscall_64+0x26/0x620 [ 1820.748074] __x64_sys_vmsplice+0x97/0xf0 [ 1820.752225] do_syscall_64+0xfd/0x620 [ 1820.756022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.761201] RIP: 0033:0x45a679 [ 1820.764393] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1820.784151] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1820.791851] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1820.799108] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1820.806376] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1820.813637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1820.820896] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1820.829367] sched: RT throttling activated [ 1820.829548] Task in /syz4 killed as a result of limit of /syz4 [ 1820.839883] memory: usage 290724kB, limit 307200kB, failcnt 326 [ 1820.845987] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1820.852765] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1820.858896] Memory cgroup stats for /syz4: cache:88KB rss:261248KB rss_huge:251904KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261280KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1820.879727] Memory cgroup out of memory: Kill process 25196 (syz-executor.4) score 1133 or sacrifice child [ 1820.889595] Killed process 25196 (syz-executor.4) total-vm:73112kB, anon-rss:8380kB, file-rss:35804kB, shmem-rss:0kB 15:34:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1820.909004] oom_reaper: reaped process 826 (syz-executor.4), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB 15:34:56 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1821.111265] net_ratelimit: 12 callbacks suppressed [ 1821.111273] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.121477] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.271779] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.277376] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.352310] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.357988] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.363558] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.369145] protocol 88fb is buggy, dev hsr_slave_1 15:34:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 15:34:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x1, 0x0) 15:34:57 executing program 5: 15:34:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:57 executing program 5: 15:34:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:34:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:34:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x1, 0x0) 15:34:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff21) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:34:58 executing program 5: [ 1822.311275] protocol 88fb is buggy, dev hsr_slave_0 [ 1822.316418] protocol 88fb is buggy, dev hsr_slave_1 15:34:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:01 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:01 executing program 3: r0 = socket(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000000), &(0x7f0000001040)=0x1002) 15:35:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001300), 0x266, 0xf7c7ac320226deca) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:01 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001300), 0x266, 0xf7c7ac320226deca) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) 15:35:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:02 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) [ 1826.471298] net_ratelimit: 18 callbacks suppressed [ 1826.471307] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.481471] protocol 88fb is buggy, dev hsr_slave_1 15:35:02 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:02 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:03 executing program 0: r0 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:03 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1827.351287] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.356480] protocol 88fb is buggy, dev hsr_slave_1 15:35:03 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x2) 15:35:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) [ 1827.489542] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1827.501021] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1827.506511] CPU: 0 PID: 1416 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1827.514218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.523562] Call Trace: [ 1827.526161] dump_stack+0x197/0x210 [ 1827.529797] dump_header+0x15e/0xa55 [ 1827.533502] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1827.538595] ? ___ratelimit+0x60/0x595 [ 1827.542472] ? do_raw_spin_unlock+0x178/0x270 [ 1827.546961] oom_kill_process.cold+0x10/0x6ef [ 1827.551449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1827.556976] ? task_will_free_mem+0x139/0x6e0 [ 1827.561466] out_of_memory+0x362/0x1330 [ 1827.565435] ? lock_downgrade+0x880/0x880 [ 1827.569573] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1827.574664] ? oom_killer_disable+0x280/0x280 [ 1827.579149] ? find_held_lock+0x35/0x130 [ 1827.583210] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1827.588089] ? memcg_event_wake+0x230/0x230 [ 1827.592408] ? do_raw_spin_unlock+0x178/0x270 [ 1827.596894] ? _raw_spin_unlock+0x2d/0x50 [ 1827.601067] try_charge+0xec5/0x1490 [ 1827.604771] ? lock_downgrade+0x880/0x880 [ 1827.608927] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1827.613761] ? rcu_read_unlock+0x33/0x60 [ 1827.617812] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1827.622641] ? wp_page_copy+0xedd/0x16a0 [ 1827.626697] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1827.632752] mem_cgroup_try_charge+0x259/0x6b0 [ 1827.637328] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1827.642250] wp_page_copy+0x430/0x16a0 [ 1827.646139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1827.651681] ? follow_pfn+0x2a0/0x2a0 [ 1827.655488] ? do_raw_spin_unlock+0x178/0x270 [ 1827.659998] do_wp_page+0x57d/0x10b0 [ 1827.663703] ? lock_acquire+0x16f/0x3f0 [ 1827.667667] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1827.672324] ? kasan_check_write+0x14/0x20 [ 1827.676545] ? do_raw_spin_lock+0xc8/0x240 [ 1827.680773] __handle_mm_fault+0x2305/0x3f80 [ 1827.685190] ? copy_page_range+0x2030/0x2030 [ 1827.689601] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1827.694264] handle_mm_fault+0x1b5/0x690 [ 1827.698320] __do_page_fault+0x62a/0xe90 [ 1827.702377] ? vmalloc_fault+0x740/0x740 [ 1827.706427] ? trace_hardirqs_off_caller+0x65/0x220 [ 1827.711431] ? SOFTIRQ_verbose+0x10/0x10 [ 1827.715484] do_page_fault+0x71/0x57d [ 1827.719276] page_fault+0x1e/0x30 [ 1827.722721] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1827.728594] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1827.747482] RSP: 0018:ffff8880844d7ab8 EFLAGS: 00010206 [ 1827.752836] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1827.760091] RDX: 0000000000001000 RSI: ffff888059766b00 RDI: 0000000020c24000 [ 1827.767350] RBP: ffff8880844d7af0 R08: ffffed100b2ece00 R09: 0000000000000000 [ 1827.774614] R10: ffffed100b2ecdff R11: ffff888059766fff R12: 0000000020c23500 [ 1827.781871] R13: ffff888059766000 R14: 0000000020c24500 R15: 00007ffffffff000 [ 1827.789164] ? copyout+0xe2/0x100 [ 1827.792678] copy_page_to_iter+0x329/0xd50 [ 1827.796986] ? kill_fasync+0x323/0x4a0 [ 1827.800869] pipe_to_user+0xb4/0x170 [ 1827.804578] __splice_from_pipe+0x391/0x7d0 [ 1827.808887] ? iter_to_pipe+0x660/0x660 [ 1827.812865] do_vmsplice.part.0+0x249/0x2b0 [ 1827.817174] ? do_tee+0x820/0x820 [ 1827.820611] ? import_iovec+0x233/0x3e0 [ 1827.824592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1827.830123] __do_sys_vmsplice+0x1b9/0x210 [ 1827.834346] ? vmsplice_type.isra.0+0x160/0x160 [ 1827.839031] ? kasan_check_read+0x11/0x20 [ 1827.843188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1827.848790] ? put_timespec64+0xda/0x140 [ 1827.852852] ? nsecs_to_jiffies+0x30/0x30 [ 1827.857014] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1827.861762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1827.866524] ? do_syscall_64+0x26/0x620 [ 1827.870491] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1827.875928] ? do_syscall_64+0x26/0x620 [ 1827.879907] __x64_sys_vmsplice+0x97/0xf0 [ 1827.884145] do_syscall_64+0xfd/0x620 [ 1827.887938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1827.893117] RIP: 0033:0x45a679 [ 1827.896300] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1827.915199] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1827.922904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1827.930160] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1827.937423] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1827.944687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1827.951949] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1827.960058] Task in /syz4 killed as a result of limit of /syz4 [ 1827.961255] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.966126] memory: usage 307200kB, limit 307200kB, failcnt 352 [ 1827.971166] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.977175] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1827.983368] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.989035] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1827.994166] protocol 88fb is buggy, dev hsr_slave_1 [ 1828.000254] Memory cgroup stats for /syz4: cache:88KB rss:277216KB rss_huge:266240KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:277244KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1828.005417] protocol 88fb is buggy, dev hsr_slave_0 [ 1828.026153] Memory cgroup out of memory: Kill process 1406 (syz-executor.4) score 1143 or sacrifice child [ 1828.031253] protocol 88fb is buggy, dev hsr_slave_1 [ 1828.042041] Killed process 1406 (syz-executor.4) total-vm:72980kB, anon-rss:12512kB, file-rss:35756kB, shmem-rss:0kB [ 1828.062156] oom_reaper: reaped process 1406 (syz-executor.4), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 15:35:04 executing program 0: r0 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:04 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xff'}) 15:35:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200000) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1828.762885] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1828.774218] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1828.779720] CPU: 1 PID: 1450 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1828.787428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.796788] Call Trace: [ 1828.799395] dump_stack+0x197/0x210 [ 1828.803073] dump_header+0x15e/0xa55 [ 1828.806837] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1828.811952] ? ___ratelimit+0x60/0x595 [ 1828.815837] ? do_raw_spin_unlock+0x178/0x270 [ 1828.820326] oom_kill_process.cold+0x10/0x6ef [ 1828.824852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1828.830424] ? task_will_free_mem+0x139/0x6e0 [ 1828.834918] out_of_memory+0x362/0x1330 [ 1828.838885] ? lock_downgrade+0x880/0x880 [ 1828.843035] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1828.848138] ? oom_killer_disable+0x280/0x280 [ 1828.852635] ? find_held_lock+0x35/0x130 [ 1828.856706] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1828.861569] ? memcg_event_wake+0x230/0x230 [ 1828.865893] ? do_raw_spin_unlock+0x178/0x270 [ 1828.870382] ? _raw_spin_unlock+0x2d/0x50 [ 1828.874526] try_charge+0xec5/0x1490 [ 1828.878228] ? lock_downgrade+0x880/0x880 [ 1828.882370] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1828.887201] ? rcu_read_unlock+0x33/0x60 [ 1828.891260] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1828.896104] ? wp_page_copy+0xedd/0x16a0 [ 1828.900158] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1828.906218] mem_cgroup_try_charge+0x259/0x6b0 [ 1828.910798] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1828.915722] wp_page_copy+0x430/0x16a0 [ 1828.919603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1828.925134] ? follow_pfn+0x2a0/0x2a0 [ 1828.928927] ? do_raw_spin_unlock+0x178/0x270 [ 1828.933423] do_wp_page+0x57d/0x10b0 [ 1828.937141] ? lock_acquire+0x16f/0x3f0 [ 1828.941103] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1828.945764] ? kasan_check_write+0x14/0x20 [ 1828.949985] ? do_raw_spin_lock+0xc8/0x240 [ 1828.954233] __handle_mm_fault+0x2305/0x3f80 [ 1828.959782] ? copy_page_range+0x2030/0x2030 [ 1828.964284] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1828.968954] handle_mm_fault+0x1b5/0x690 [ 1828.973036] __do_page_fault+0x62a/0xe90 [ 1828.977107] ? vmalloc_fault+0x740/0x740 [ 1828.981166] ? trace_hardirqs_off_caller+0x65/0x220 [ 1828.986186] ? SOFTIRQ_verbose+0x10/0x10 [ 1828.990310] do_page_fault+0x71/0x57d [ 1828.994115] page_fault+0x1e/0x30 [ 1828.997566] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1829.003503] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1829.022535] RSP: 0018:ffff88804bd1fab8 EFLAGS: 00010206 [ 1829.028167] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1829.035435] RDX: 0000000000001000 RSI: ffff88805a30eb00 RDI: 0000000020cda000 [ 1829.042707] RBP: ffff88804bd1faf0 R08: ffffed100b461e00 R09: 0000000000000000 [ 1829.050240] R10: ffffed100b461dff R11: ffff88805a30efff R12: 0000000020cd9500 [ 1829.057499] R13: ffff88805a30e000 R14: 0000000020cda500 R15: 00007ffffffff000 [ 1829.064787] ? copyout+0xe2/0x100 [ 1829.068236] copy_page_to_iter+0x329/0xd50 [ 1829.072475] ? kill_fasync+0x323/0x4a0 [ 1829.077001] pipe_to_user+0xb4/0x170 [ 1829.080720] __splice_from_pipe+0x391/0x7d0 [ 1829.085104] ? iter_to_pipe+0x660/0x660 [ 1829.089089] do_vmsplice.part.0+0x249/0x2b0 [ 1829.093401] ? do_tee+0x820/0x820 [ 1829.096843] ? import_iovec+0x233/0x3e0 [ 1829.100824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1829.106367] __do_sys_vmsplice+0x1b9/0x210 [ 1829.110593] ? vmsplice_type.isra.0+0x160/0x160 [ 1829.115266] ? kasan_check_read+0x11/0x20 [ 1829.119415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1829.124938] ? put_timespec64+0xda/0x140 [ 1829.128989] ? nsecs_to_jiffies+0x30/0x30 [ 1829.133163] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1829.137918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1829.142667] ? do_syscall_64+0x26/0x620 [ 1829.146707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1829.152083] ? do_syscall_64+0x26/0x620 [ 1829.156064] __x64_sys_vmsplice+0x97/0xf0 [ 1829.160216] do_syscall_64+0xfd/0x620 [ 1829.164010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1829.169219] RIP: 0033:0x45a679 [ 1829.172418] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1829.191329] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1829.199064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1829.206326] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1829.213623] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1829.220897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1829.228211] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1829.235809] Task in /syz4 killed as a result of limit of /syz4 [ 1829.241839] memory: usage 307116kB, limit 307200kB, failcnt 389 [ 1829.248013] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1829.254829] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1829.260969] Memory cgroup stats for /syz4: cache:88KB rss:277892KB rss_huge:268288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:277968KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1829.281790] Memory cgroup out of memory: Kill process 1443 (syz-executor.4) score 1146 or sacrifice child [ 1829.291549] Killed process 1444 (syz-executor.4) total-vm:72980kB, anon-rss:13232kB, file-rss:35768kB, shmem-rss:0kB [ 1829.308623] oom_reaper: reaped process 1444 (syz-executor.4), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 15:35:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x0) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000780)="f2a11a289baaf6dd15bbcc4e1ad3fe160ec230a61a7f9e25c78c5e70abba84c3bdae3b327c7c54b7888cca490d30577ace550cf357f31e424e4e725e2de40b0f9d2ad65c64ff7bba2cdeed5a0efb19861cfe5c2558f0e19307dc91c9247448e32526ef153a8d3a02cf2134a5e74aeb49187300344eafbf6c640ba7853adc30b879679c05a80b58c70b397b76d5d8c43f6f1cf274cdc46fe5132c0eefa69c5dba3d2fa7e20e0c06da97d9af04486b9f864f7215f0e8c581747e60d8e2affae2b35042d1c6ac869bed65a690b430733deae939f3e192866ac44b20aa02195c59454794fef0eadfdde27e7a2a9917487d91a8f460b43a533a4d1a38bd0c1e43ed56a55b1325e6f31e8d5e52e4a005f795b0056f6b9fdc3414dc8cd7294645e88a627a3ee0b7150d1e58f1e24e2f8bfd6c4f17f93fbc678ff0d6762622683ed0371216a4f772e4561ab105d31aa9f9bb1f5e4120fffb14bd4ccfcd4f791f12e056e667e2744ce8cfca65de1b38b2a26484a1e8816444076bf85b7631e1f7d43589945678bd07664badbd93b35817df16dc90376ad27c198b926935134d5d467120833e4e1b8fb0103364ea61ffbc788c70f3d6371301c10bfce64981aad002300771187307d8b4d7669bb10e88ed42d1a1ce80480e977177336e9c4a07f093c228cc6d2b40fe95e1eb820fa9b104a1cddecf6321010731deed0ad699d6dafc49ec023fb6202900b8a87d324985818234627e17116bfb5b31cbceb41dbffbf7d6fc83ccdd7289a85406bb8947fc37b8797f8450bcdcc38cf47589e2dac66c6c1604f497aaa401f8296c9b6ac4e8a333e9bd151182173beece4c20d66917198b182d11ff5c499aa60a9a628a999e93f211f664a897898fcb87f491f23c8be46d2628424f24b4e0c15c2280e7407bef282bb058ea626c15fa848dfb0b061286fbea2679bb0ec6377c9445be48226e5c5860f83d819a73748092a43a407b2b2330c06f951ac54d4e8efc0dcc077e27911bed7a1fe519a855887343cba65993c2ca738a1a361d4eb6a3c93f3ea817c0ddc8580297e95fa00dc305c6ffae1d9957a1ff881bff0b03101338b885e4869d1e459bcf3b7555a708ef822c27de0a2b357b64e8b2c1e9d81782f61f317444d1f06e35c0e5bdbfbf0510121851db344a159411bfc7184eacc7a26ad6f3030c73ddb5eaa8ade8f85ede54337686d328d007e7203f627024a8fd2f0d5cab73ba0a1c1121c933806afb25cfbae6273ab4dfe37c7c7471a2894f9f9ce9e0e574416c17e1da753f3b8ee11b6fb13298a609a9b9bf5f3ec6fde1d5516b153592cf26af0c411a48689abb0adbf5c964130ec141813dae475f20f6e65b434bf88356792ecd88b56158177e0a55b9865784fde976fbc7a582d198a2200ea03530d77eff7072d9a704c2850899684135337452f574074fe9db40e505ee511ef669b060add911e311f25e53120cc51b0f1e02068e57a04f4c0de8af7c2e5be0551dde3566f76e061d3368fbcf81498fb665bb7b7c3565b396022e11fdbd55e6fb9527fb8c38ece372e023e81a55dea59074ad8cdae67027a1ede86408225e97fdb0a8d059a9533b499f5774dc20032ffadc10c832b501f30da49510f3f3a379d575706f36ec975cfc00c42d7f4cdb931273c2c03badd92de6ce0deae090d944dc4d9d5c8faddca37c754f48141cc31fb8350bfce6403b256f2c47c4e355b0e6902cefacac5534923313f0f7aa86b1e338ddeabfe25e9cf3b0f7b07ccb5ecbb1db063ec579d89f2777fe6d3305b81b932e313cdd91866c5dff21bfd04c4016fd87f47b97c152cd6847275dda58796fe4c331aa2c8cd10ad253a70c23a1619bc129db26812e20738ec96cf20257d2b7ce2420c437c928c2e2903769854a862413cef50dd33c5afebdb52deb8db20b815aadfa434494e4daeb6b8ee02eec2a68165e1559342af92c0cf6dc623d0b1111e0c3248eb2fb8f25b823fc61414df3a2f94e2c505599232336b3f26155cff903b6912750a4b94c80a81cc31812d946ef456a0577cf341963c4d693b60649bfe50dbb6321c52d9794fde2dfe573f0114cd17c63a8c60702515ceea2adb2bf08256bcdb866a48b8fd2b007a4b5794749229bc31d522b2cf9407669f0333f5de7ce7de473ad486e3298fe653efb4e09562331c9c000638d9dc787a568bb7bdb2835e0619a023cd8428f7cb0a74853c0b4bdbadc4687245b5959c034abbf8a2ef61a2118aed910f82ae819109b0595226672ecfffb9fc3a83b0269e653bd711fb2c859464347024744aae898f513f07c032978c35e5af11ea6c8ebdecae1f23bb2467835611ce78cca487919df8bdf6c67f167fea159f5aa699642eb8cf730c29683595e09a7cd8afed6ba39e2035f1324e0fe4bb822dddda62ff2893fac3267b8ec7fba189251b5a44004b1bef7be28a856e3bd64337b6f80d3dd9d3a54c194f34147ad8c2bdb7c08f65e0184b3a0a66382fae03d279c9023ecceb1cbd135c622dd350e85dd8dd90627264476db13d0372babca81d03df54bd61573b586106bcd76dc66d4bde7a3c8c337b3ed2c9ed08b0ec50c5147ae920cd5c38fa09ff3da7297f697c6066982f84d0ab8e5288be9faa7f627577352e997515f177dcf0b4d3ef9a01d3bd931491499018ba62309b135af4f4ec1da085515acf210f5cf6b6aebe7eda96e8be7c329791b93ebee8254d67470545ce24b08ff5812e60ce1e3b223361688c2d9221e6d4c277a541142b6e7a9514e6bdce32789bb8be7246fb66a947e8df98efdb7c1b7919b816a6e995dd0ce4a95144cbd4ae2b037e014fc03d039891a074c162f0a9438f6d9fe7ba1b537ed8f73fde1c4fea03fa95163d98299aa19142131e1e0e910cc0892c9ddab7bb5", 0x803}, {0x0}], 0x2, &(0x7f0000002dc0)=[@rights], 0x18}, 0x0) 15:35:05 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:05 executing program 5: unlinkat(0xffffffffffffff9c, 0x0, 0x200) 15:35:05 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xfd'}) [ 1829.991000] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1830.002750] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1830.008168] CPU: 0 PID: 1490 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1830.008177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1830.008182] Call Trace: [ 1830.008209] dump_stack+0x197/0x210 [ 1830.008232] dump_header+0x15e/0xa55 [ 1830.035250] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1830.040462] ? ___ratelimit+0x60/0x595 [ 1830.044375] ? do_raw_spin_unlock+0x178/0x270 [ 1830.049022] oom_kill_process.cold+0x10/0x6ef [ 1830.053555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1830.059126] ? task_will_free_mem+0x139/0x6e0 [ 1830.063658] out_of_memory+0x362/0x1330 [ 1830.067668] ? lock_downgrade+0x880/0x880 [ 1830.071865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1830.077002] ? oom_killer_disable+0x280/0x280 [ 1830.081539] ? find_held_lock+0x35/0x130 [ 1830.085648] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1830.090616] ? memcg_event_wake+0x230/0x230 [ 1830.094988] ? do_raw_spin_unlock+0x178/0x270 [ 1830.099518] ? _raw_spin_unlock+0x2d/0x50 [ 1830.104401] try_charge+0xec5/0x1490 [ 1830.108153] ? lock_downgrade+0x880/0x880 [ 1830.112339] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1830.117328] ? rcu_read_unlock+0x33/0x60 [ 1830.121451] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1830.126312] ? wp_page_copy+0xedd/0x16a0 [ 1830.130406] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1830.136526] mem_cgroup_try_charge+0x259/0x6b0 [ 1830.141136] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1830.146085] wp_page_copy+0x430/0x16a0 [ 1830.150012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1830.155597] ? follow_pfn+0x2a0/0x2a0 [ 1830.159428] ? do_raw_spin_unlock+0x178/0x270 [ 1830.163960] do_wp_page+0x57d/0x10b0 [ 1830.167698] ? lock_acquire+0x16f/0x3f0 [ 1830.171692] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1830.176387] ? kasan_check_write+0x14/0x20 [ 1830.180650] ? do_raw_spin_lock+0xc8/0x240 [ 1830.184916] __handle_mm_fault+0x2305/0x3f80 [ 1830.189360] ? copy_page_range+0x2030/0x2030 [ 1830.193817] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1830.198550] handle_mm_fault+0x1b5/0x690 [ 1830.202868] __do_page_fault+0x62a/0xe90 [ 1830.206962] ? vmalloc_fault+0x740/0x740 [ 1830.211047] ? trace_hardirqs_off_caller+0x65/0x220 [ 1830.216088] ? SOFTIRQ_verbose+0x10/0x10 [ 1830.220215] do_page_fault+0x71/0x57d [ 1830.224044] page_fault+0x1e/0x30 [ 1830.227523] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1830.233425] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1830.252471] RSP: 0018:ffff888052237ab8 EFLAGS: 00010206 [ 1830.257879] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1830.265174] RDX: 0000000000001000 RSI: ffff88805ad54b00 RDI: 0000000020cef000 [ 1830.272473] RBP: ffff888052237af0 R08: ffffed100b5aaa00 R09: 0000000000000000 [ 1830.279770] R10: ffffed100b5aa9ff R11: ffff88805ad54fff R12: 0000000020cee500 [ 1830.287068] R13: ffff88805ad54000 R14: 0000000020cef500 R15: 00007ffffffff000 [ 1830.294392] ? copyout+0xe2/0x100 [ 1830.294413] copy_page_to_iter+0x329/0xd50 [ 1830.302098] ? kill_fasync+0x323/0x4a0 [ 1830.302123] pipe_to_user+0xb4/0x170 [ 1830.302141] __splice_from_pipe+0x391/0x7d0 [ 1830.302155] ? iter_to_pipe+0x660/0x660 [ 1830.302183] do_vmsplice.part.0+0x249/0x2b0 [ 1830.322785] ? do_tee+0x820/0x820 [ 1830.326271] ? import_iovec+0x233/0x3e0 [ 1830.330286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1830.335860] __do_sys_vmsplice+0x1b9/0x210 [ 1830.340169] ? vmsplice_type.isra.0+0x160/0x160 [ 1830.344861] ? kasan_check_read+0x11/0x20 [ 1830.349036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1830.354595] ? put_timespec64+0xda/0x140 [ 1830.358688] ? nsecs_to_jiffies+0x30/0x30 [ 1830.362884] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1830.367672] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1830.372462] ? do_syscall_64+0x26/0x620 [ 1830.376461] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1830.381856] ? do_syscall_64+0x26/0x620 [ 1830.385864] __x64_sys_vmsplice+0x97/0xf0 [ 1830.390044] do_syscall_64+0xfd/0x620 [ 1830.393888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1830.399100] RIP: 0033:0x45a679 [ 1830.402313] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1830.421236] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1830.428970] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1830.436254] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1830.443541] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1830.450937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1830.458232] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1830.465913] Task in /syz4 killed as a result of limit of /syz4 [ 1830.471964] memory: usage 307168kB, limit 307200kB, failcnt 425 [ 1830.478028] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1830.485021] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:35:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000480)) 15:35:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xfe'}) [ 1830.491194] Memory cgroup stats for /syz4: cache:88KB rss:278020KB rss_huge:268288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:278052KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1830.512013] Memory cgroup out of memory: Kill process 1481 (syz-executor.4) score 1146 or sacrifice child [ 1830.522219] Killed process 1485 (syz-executor.4) total-vm:72980kB, anon-rss:13232kB, file-rss:35768kB, shmem-rss:0kB 15:35:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xff'}) [ 1830.537203] oom_reaper: reaped process 1485 (syz-executor.4), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 15:35:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x0) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100), 0x0) 15:35:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00\x00\x00\xff'}) 15:35:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1831.206933] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) [ 1831.479365] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1831.490701] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1831.496211] CPU: 1 PID: 1540 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1831.503937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.513302] Call Trace: [ 1831.515909] dump_stack+0x197/0x210 [ 1831.519559] dump_header+0x15e/0xa55 [ 1831.523286] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1831.528401] ? ___ratelimit+0x60/0x595 [ 1831.532305] ? do_raw_spin_unlock+0x178/0x270 [ 1831.536855] oom_kill_process.cold+0x10/0x6ef [ 1831.541377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1831.546932] ? task_will_free_mem+0x139/0x6e0 [ 1831.551476] out_of_memory+0x362/0x1330 [ 1831.555473] ? lock_downgrade+0x880/0x880 [ 1831.559643] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1831.564856] ? oom_killer_disable+0x280/0x280 [ 1831.569371] ? find_held_lock+0x35/0x130 [ 1831.573472] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1831.578346] ? memcg_event_wake+0x230/0x230 [ 1831.582691] ? do_raw_spin_unlock+0x178/0x270 [ 1831.587234] ? _raw_spin_unlock+0x2d/0x50 [ 1831.591404] try_charge+0xec5/0x1490 [ 1831.595129] ? lock_downgrade+0x880/0x880 [ 1831.599294] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1831.604150] ? rcu_read_unlock+0x33/0x60 [ 1831.608232] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1831.613088] ? wp_page_copy+0xedd/0x16a0 [ 1831.617182] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1831.623277] mem_cgroup_try_charge+0x259/0x6b0 [ 1831.627889] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1831.632921] wp_page_copy+0x430/0x16a0 [ 1831.636823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1831.642381] ? follow_pfn+0x2a0/0x2a0 [ 1831.646205] ? do_raw_spin_unlock+0x178/0x270 [ 1831.650728] do_wp_page+0x57d/0x10b0 [ 1831.654464] ? lock_acquire+0x16f/0x3f0 [ 1831.658888] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1831.663567] ? kasan_check_write+0x14/0x20 [ 1831.667805] ? do_raw_spin_lock+0xc8/0x240 [ 1831.672055] __handle_mm_fault+0x2305/0x3f80 15:35:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:07 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1831.676476] ? copy_page_range+0x2030/0x2030 [ 1831.680911] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1831.685597] handle_mm_fault+0x1b5/0x690 [ 1831.689691] __do_page_fault+0x62a/0xe90 [ 1831.693785] ? vmalloc_fault+0x740/0x740 [ 1831.697862] ? trace_hardirqs_off_caller+0x65/0x220 [ 1831.702894] ? SOFTIRQ_verbose+0x10/0x10 [ 1831.706977] do_page_fault+0x71/0x57d [ 1831.710794] page_fault+0x1e/0x30 [ 1831.714261] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1831.720150] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1831.739044] RSP: 0018:ffff88805d44fab8 EFLAGS: 00010206 [ 1831.744416] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1831.751672] RDX: 0000000000001000 RSI: ffff888052038b00 RDI: 0000000020cfc000 [ 1831.758950] RBP: ffff88805d44faf0 R08: ffffed100a407200 R09: 0000000000000000 [ 1831.766238] R10: ffffed100a4071ff R11: ffff888052038fff R12: 0000000020cfb500 [ 1831.773517] R13: ffff888052038000 R14: 0000000020cfc500 R15: 00007ffffffff000 [ 1831.780838] ? copyout+0xe2/0x100 [ 1831.784293] copy_page_to_iter+0x329/0xd50 [ 1831.788525] ? kill_fasync+0x323/0x4a0 [ 1831.792415] pipe_to_user+0xb4/0x170 [ 1831.796124] __splice_from_pipe+0x391/0x7d0 [ 1831.800437] ? iter_to_pipe+0x660/0x660 [ 1831.804409] do_vmsplice.part.0+0x249/0x2b0 [ 1831.808732] ? do_tee+0x820/0x820 [ 1831.812184] ? import_iovec+0x233/0x3e0 [ 1831.816165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1831.821703] __do_sys_vmsplice+0x1b9/0x210 [ 1831.825926] ? vmsplice_type.isra.0+0x160/0x160 [ 1831.830585] ? kasan_check_read+0x11/0x20 [ 1831.834730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1831.840256] ? put_timespec64+0xda/0x140 [ 1831.844312] ? nsecs_to_jiffies+0x30/0x30 [ 1831.848461] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1831.853209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1831.857967] ? do_syscall_64+0x26/0x620 [ 1831.861948] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1831.867300] ? do_syscall_64+0x26/0x620 [ 1831.871270] __x64_sys_vmsplice+0x97/0xf0 [ 1831.875411] do_syscall_64+0xfd/0x620 [ 1831.879202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1831.884380] RIP: 0033:0x45a679 [ 1831.887564] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1831.906483] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1831.914206] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1831.921464] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1831.928725] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1831.935983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1831.944407] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1831.951977] Task in /syz4 killed as a result of limit of /syz4 [ 1831.958013] memory: usage 307168kB, limit 307200kB, failcnt 456 [ 1831.961281] net_ratelimit: 12 callbacks suppressed [ 1831.961289] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.964117] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1831.969395] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.974396] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1831.992582] Memory cgroup stats for /syz4: cache:88KB rss:278012KB rss_huge:268288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:278096KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1832.013397] Memory cgroup out of memory: Kill process 1524 (syz-executor.4) score 1146 or sacrifice child [ 1832.023307] Killed process 1545 (syz-executor.4) total-vm:72848kB, anon-rss:13224kB, file-rss:35768kB, shmem-rss:0kB [ 1832.068608] oom_reaper: reaped process 1545 (syz-executor.4), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 1832.071516] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.084701] protocol 88fb is buggy, dev hsr_slave_1 [ 1832.471932] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.477611] protocol 88fb is buggy, dev hsr_slave_1 [ 1832.483871] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.489368] protocol 88fb is buggy, dev hsr_slave_1 15:35:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) r2 = syz_open_pts(r0, 0x288653d23e8efc85) ioctl$TCSETXW(r2, 0x5435, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) bind$netlink(r4, &(0x7f00000000c0), 0xc) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x0) write$P9_RLOCK(r5, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 1832.711821] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.716955] protocol 88fb is buggy, dev hsr_slave_1 15:35:08 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1832.758923] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1833.058161] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1833.069529] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1833.075033] CPU: 0 PID: 1609 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1833.082761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.092126] Call Trace: [ 1833.094738] dump_stack+0x197/0x210 [ 1833.098391] dump_header+0x15e/0xa55 [ 1833.102124] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1833.107246] ? ___ratelimit+0x60/0x595 [ 1833.111148] ? do_raw_spin_unlock+0x178/0x270 [ 1833.115662] oom_kill_process.cold+0x10/0x6ef [ 1833.120158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1833.125696] ? task_will_free_mem+0x139/0x6e0 [ 1833.130186] out_of_memory+0x362/0x1330 [ 1833.134202] ? lock_downgrade+0x880/0x880 [ 1833.138341] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1833.143436] ? oom_killer_disable+0x280/0x280 [ 1833.148277] ? find_held_lock+0x35/0x130 [ 1833.152341] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1833.157173] ? memcg_event_wake+0x230/0x230 [ 1833.161489] ? do_raw_spin_unlock+0x178/0x270 [ 1833.165984] ? _raw_spin_unlock+0x2d/0x50 [ 1833.170136] try_charge+0xec5/0x1490 [ 1833.173842] ? lock_downgrade+0x880/0x880 [ 1833.177983] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1833.182815] ? rcu_read_unlock+0x33/0x60 [ 1833.186866] ? get_mem_cgroup_from_mm+0x185/0x510 [ 1833.191695] ? wp_page_copy+0xedd/0x16a0 [ 1833.195752] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 1833.201809] mem_cgroup_try_charge+0x259/0x6b0 [ 1833.206395] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1833.211334] wp_page_copy+0x430/0x16a0 [ 1833.215219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1833.220797] ? follow_pfn+0x2a0/0x2a0 [ 1833.224600] ? do_raw_spin_unlock+0x178/0x270 [ 1833.229094] do_wp_page+0x57d/0x10b0 [ 1833.232808] ? lock_acquire+0x16f/0x3f0 [ 1833.237212] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1833.241882] ? kasan_check_write+0x14/0x20 [ 1833.246108] ? do_raw_spin_lock+0xc8/0x240 [ 1833.250349] __handle_mm_fault+0x2305/0x3f80 [ 1833.254752] ? copy_page_range+0x2030/0x2030 [ 1833.259163] ? count_memcg_event_mm+0x2b1/0x4d0 [ 1833.263823] handle_mm_fault+0x1b5/0x690 [ 1833.267878] __do_page_fault+0x62a/0xe90 [ 1833.271933] ? vmalloc_fault+0x740/0x740 [ 1833.275987] ? trace_hardirqs_off_caller+0x65/0x220 [ 1833.280990] ? SOFTIRQ_verbose+0x10/0x10 [ 1833.285052] do_page_fault+0x71/0x57d [ 1833.288844] page_fault+0x1e/0x30 [ 1833.292304] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1833.298189] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1833.317086] RSP: 0018:ffff88809dfa7ab8 EFLAGS: 00010206 [ 1833.322440] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1833.329697] RDX: 0000000000001000 RSI: ffff8880a78aab00 RDI: 0000000020cf7000 [ 1833.336963] RBP: ffff88809dfa7af0 R08: ffffed1014f15600 R09: 0000000000000000 [ 1833.344225] R10: ffffed1014f155ff R11: ffff8880a78aafff R12: 0000000020cf6500 [ 1833.351492] R13: ffff8880a78aa000 R14: 0000000020cf7500 R15: 00007ffffffff000 [ 1833.358793] ? copyout+0xe2/0x100 [ 1833.362250] copy_page_to_iter+0x329/0xd50 [ 1833.366472] ? kill_fasync+0x323/0x4a0 [ 1833.370356] pipe_to_user+0xb4/0x170 [ 1833.374061] __splice_from_pipe+0x391/0x7d0 [ 1833.378371] ? iter_to_pipe+0x660/0x660 [ 1833.382340] do_vmsplice.part.0+0x249/0x2b0 [ 1833.386653] ? do_tee+0x820/0x820 [ 1833.390095] ? import_iovec+0x233/0x3e0 [ 1833.394069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1833.399598] __do_sys_vmsplice+0x1b9/0x210 [ 1833.403823] ? vmsplice_type.isra.0+0x160/0x160 [ 1833.408488] ? kasan_check_read+0x11/0x20 [ 1833.412630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1833.418153] ? put_timespec64+0xda/0x140 [ 1833.422208] ? nsecs_to_jiffies+0x30/0x30 [ 1833.426379] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1833.431126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1833.435879] ? do_syscall_64+0x26/0x620 [ 1833.439843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1833.445198] ? do_syscall_64+0x26/0x620 [ 1833.449166] __x64_sys_vmsplice+0x97/0xf0 [ 1833.453309] do_syscall_64+0xfd/0x620 [ 1833.457102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1833.462291] RIP: 0033:0x45a679 [ 1833.465470] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1833.485169] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1833.492868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1833.500138] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1833.507406] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1833.514664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1833.521925] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1833.529460] Task in /syz4 killed as a result of limit of /syz4 [ 1833.535512] memory: usage 307168kB, limit 307200kB, failcnt 499 [ 1833.541596] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1833.548355] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1833.554548] Memory cgroup stats for /syz4: cache:88KB rss:277892KB rss_huge:268288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:278088KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1833.575459] Memory cgroup out of memory: Kill process 1569 (syz-executor.4) score 1146 or sacrifice child [ 1833.585228] Killed process 1570 (syz-executor.4) total-vm:72980kB, anon-rss:13236kB, file-rss:35776kB, shmem-rss:0kB 15:35:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x80) 15:35:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) [ 1833.603797] oom_reaper: reaped process 1570 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 15:35:09 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:35:09 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:10 executing program 5: chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15:35:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:35:10 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00f4ffffffffffffff0000"], 0x1) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 15:35:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/126, 0x7e}, {0x0}, {0x0}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000900)=[{}, {}, {}, {r3}, {}], 0x5, 0x42) shutdown(r2, 0x0) 15:35:10 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000900)=[{}, {}, {}, {r3}, {r4}], 0x5, 0x42) shutdown(r2, 0x0) 15:35:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/tcp6\x00') close(r0) 15:35:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 15:35:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:10 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) poll(&(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x5, 0x42) shutdown(r2, 0x0) 15:35:11 executing program 3: close(0xffffffffffffffff) 15:35:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/68, 0x44}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r4, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 15:35:11 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) 15:35:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) write$P9_RLOCK(r5, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r6 = gettid() r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000367fe4)=""/91, 0x275) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 15:35:11 executing program 3: close(0xffffffffffffffff) 15:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) poll(&(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x5, 0x42) shutdown(r2, 0x0) 15:35:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x0) fallocate(r0, 0x3, 0x0, 0x8020001) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000480)=""/138, 0x8a}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x0, 0x4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x0) 15:35:11 executing program 3: close(0xffffffffffffffff) 15:35:11 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth1_to_hsr\x00'}) [ 1835.552556] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1835.566842] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1835.572862] CPU: 0 PID: 1813 Comm: syz-executor.4 Not tainted 4.19.87-syzkaller #0 [ 1835.580700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.590076] Call Trace: [ 1835.592685] dump_stack+0x197/0x210 [ 1835.596317] dump_header+0x15e/0xa55 [ 1835.600032] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1835.605135] ? ___ratelimit+0x60/0x595 [ 1835.609013] ? do_raw_spin_unlock+0x178/0x270 [ 1835.613506] oom_kill_process.cold+0x10/0x6ef [ 1835.618176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1835.623705] ? task_will_free_mem+0x139/0x6e0 [ 1835.628198] out_of_memory+0x362/0x1330 [ 1835.632168] ? lock_downgrade+0x880/0x880 [ 1835.636310] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1835.641406] ? oom_killer_disable+0x280/0x280 [ 1835.645898] ? find_held_lock+0x35/0x130 [ 1835.649974] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1835.654811] ? memcg_event_wake+0x230/0x230 [ 1835.659155] ? do_raw_spin_unlock+0x178/0x270 [ 1835.663645] ? _raw_spin_unlock+0x2d/0x50 [ 1835.667789] try_charge+0xec5/0x1490 [ 1835.671504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1835.677910] ? lock_downgrade+0x880/0x880 [ 1835.682073] ? kasan_check_read+0x11/0x20 [ 1835.686325] memcg_kmem_charge_memcg+0x83/0x170 [ 1835.691025] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1835.695748] ? __isolate_free_page+0x4c0/0x4c0 [ 1835.700360] memcg_kmem_charge+0x13b/0x370 [ 1835.704605] __alloc_pages_nodemask+0x3c3/0x750 [ 1835.709283] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1835.714314] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1835.718895] ? trace_hardirqs_on+0x67/0x220 [ 1835.723220] copy_process.part.0+0x3e0/0x7a30 [ 1835.727714] ? debug_smp_processor_id+0x1c/0x20 [ 1835.732377] ? perf_trace_lock+0xeb/0x510 [ 1835.736520] ? mark_held_locks+0x100/0x100 [ 1835.740751] ? SOFTIRQ_verbose+0x10/0x10 [ 1835.744820] ? debug_smp_processor_id+0x1c/0x20 [ 1835.749483] ? perf_trace_lock+0xeb/0x510 [ 1835.753641] ? __might_fault+0x12b/0x1e0 [ 1835.757794] ? __cleanup_sighand+0x70/0x70 [ 1835.762029] ? lock_downgrade+0x880/0x880 [ 1835.766197] _do_fork+0x257/0xfd0 [ 1835.769668] ? fork_idle+0x1d0/0x1d0 [ 1835.773392] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1835.778227] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1835.782979] ? do_syscall_64+0x26/0x620 [ 1835.786952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.792416] ? do_syscall_64+0x26/0x620 [ 1835.796405] __x64_sys_clone+0xbf/0x150 [ 1835.800376] do_syscall_64+0xfd/0x620 [ 1835.804275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.809454] RIP: 0033:0x45a679 [ 1835.812641] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1835.831539] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1835.839256] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 1835.846530] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000002000100 [ 1835.854075] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000 [ 1835.861614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1835.869583] R13: 00000000004c0d71 R14: 00000000004d4948 R15: 00000000ffffffff [ 1835.877889] Task in /syz4 killed as a result of limit of /syz4 [ 1835.884387] memory: usage 307200kB, limit 307200kB, failcnt 529 [ 1835.890496] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1835.897878] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1835.904874] Memory cgroup stats for /syz4: cache:88KB rss:276856KB rss_huge:266240KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:277020KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1835.929137] Memory cgroup out of memory: Kill process 604 (syz-executor.4) score 1133 or sacrifice child [ 1835.939321] Killed process 604 (syz-executor.4) total-vm:73112kB, anon-rss:8380kB, file-rss:35804kB, shmem-rss:0kB [ 1838.156217] net_ratelimit: 20 callbacks suppressed [ 1838.156419] protocol 88fb is buggy, dev hsr_slave_0 [ 1838.169205] protocol 88fb is buggy, dev hsr_slave_1 [ 1838.311264] protocol 88fb is buggy, dev hsr_slave_0 [ 1838.316394] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.551147] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1940.557460] rcu: (detected by 0, t=10502 jiffies, g=276845, q=99) [ 1940.563786] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295131169-4295120666), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1940.576429] syz-executor.4 R running task 26256 1813 5211 0x80000000 [ 1940.584139] Call Trace: [ 1940.586886] [ 1940.589056] sched_show_task.cold+0x2ee/0x35d [ 1940.593548] ? set_rq_offline.part.0+0x140/0x140 [ 1940.598307] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1940.603325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1940.608864] rcu_check_callbacks.cold+0xaa1/0xd90 [ 1940.613712] update_process_times+0x32/0x80 [ 1940.618025] tick_sched_handle+0xa2/0x190 [ 1940.622166] tick_sched_timer+0x47/0x130 [ 1940.626221] __hrtimer_run_queues+0x33b/0xdc0 [ 1940.631336] ? tick_sched_do_timer+0x1b0/0x1b0 [ 1940.635931] ? hrtimer_fixup_activate+0x30/0x30 [ 1940.640602] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1940.645613] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 1940.651591] hrtimer_interrupt+0x314/0x770 [ 1940.655914] smp_apic_timer_interrupt+0x111/0x550 [ 1940.660751] apic_timer_interrupt+0xf/0x20 [ 1940.664971] [ 1940.667208] RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 [ 1940.672312] Code: c0 98 5b f2 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d bd 45 a6 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 82 cb fc f9 65 8b 05 db d7 b5 78 85 c0 74 06 41 [ 1940.691214] RSP: 0018:ffff88805d41f518 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 1940.698912] RAX: 1ffffffff11e4b73 RBX: ffff88805d41f588 RCX: 1ffff11014f20d31 [ 1940.706170] RDX: dffffc0000000000 RSI: ffff8880a7906968 RDI: ffff8880a790693c [ 1940.713451] RBP: ffff88805d41f520 R08: ffff8880a79060c0 R09: ffff8880a7906988 [ 1940.720812] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff88fba700 [ 1940.730142] R13: ffff88805d41f5e8 R14: ffff88805962c080 R15: 1ffff1100ba83ead [ 1940.737426] ? _raw_spin_unlock_irq+0x28/0x90 [ 1940.741911] css_task_iter_next+0x175/0x210 [ 1940.746220] ? oom_badness+0x6c0/0x6c0 [ 1940.750104] mem_cgroup_scan_tasks+0xbb/0x180 [ 1940.754590] ? mem_cgroup_iter_break+0x30/0x30 [ 1940.759169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1940.764696] ? task_will_free_mem+0x139/0x6e0 [ 1940.769545] out_of_memory+0x27a/0x1330 [ 1940.773517] ? lock_downgrade+0x880/0x880 [ 1940.777657] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1940.782759] ? oom_killer_disable+0x280/0x280 [ 1940.787252] ? find_held_lock+0x35/0x130 [ 1940.791315] mem_cgroup_out_of_memory+0x1d2/0x240 [ 1940.796153] ? memcg_event_wake+0x230/0x230 [ 1940.800467] ? do_raw_spin_unlock+0x178/0x270 [ 1940.804951] ? _raw_spin_unlock+0x2d/0x50 [ 1940.809090] try_charge+0xec5/0x1490 [ 1940.812801] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1940.817646] ? lock_downgrade+0x880/0x880 [ 1940.821919] ? kasan_check_read+0x11/0x20 [ 1940.826073] memcg_kmem_charge_memcg+0x83/0x170 [ 1940.830776] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1940.835284] ? __isolate_free_page+0x4c0/0x4c0 [ 1940.839872] memcg_kmem_charge+0x13b/0x370 [ 1940.844108] __alloc_pages_nodemask+0x3c3/0x750 [ 1940.848786] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1940.853806] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1940.858386] ? trace_hardirqs_on+0x67/0x220 [ 1940.862706] copy_process.part.0+0x3e0/0x7a30 [ 1940.867196] ? debug_smp_processor_id+0x1c/0x20 [ 1940.871853] ? perf_trace_lock+0xeb/0x510 [ 1940.876003] ? mark_held_locks+0x100/0x100 [ 1940.880234] ? SOFTIRQ_verbose+0x10/0x10 [ 1940.884286] ? debug_smp_processor_id+0x1c/0x20 [ 1940.888965] ? perf_trace_lock+0xeb/0x510 [ 1940.893194] ? __might_fault+0x12b/0x1e0 [ 1940.897431] ? __cleanup_sighand+0x70/0x70 [ 1940.901921] ? lock_downgrade+0x880/0x880 [ 1940.906072] _do_fork+0x257/0xfd0 [ 1940.909534] ? fork_idle+0x1d0/0x1d0 [ 1940.913250] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1940.917996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1940.922753] ? do_syscall_64+0x26/0x620 [ 1940.926729] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1940.932084] ? do_syscall_64+0x26/0x620 [ 1940.936061] __x64_sys_clone+0xbf/0x150 [ 1940.940027] do_syscall_64+0xfd/0x620 [ 1940.943821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1940.949000] RIP: 0033:0x45a679 [ 1940.952191] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1940.971169] RSP: 002b:00007f0939891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1940.978883] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 1940.986152] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000002000100 [ 1940.993423] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000 [ 1941.000857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09398926d4 [ 1941.008117] R13: 00000000004c0d71 R14: 00000000004d4948 R15: 00000000ffffffff [ 1941.015402] rcu: rcu_preempt kthread starved for 10548 jiffies! g276845 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1941.025959] rcu: RCU grace-period kthread stack dump: [ 1941.031157] rcu_preempt R running task 29008 10 2 0x80000000 [ 1941.038348] Call Trace: [ 1941.040933] __schedule+0x866/0x1dc0 [ 1941.044644] ? firmware_map_remove+0x1a7/0x1a7 [ 1941.049217] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1941.054330] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1941.059050] ? trace_hardirqs_on+0x67/0x220 [ 1941.063381] schedule+0x92/0x1c0 [ 1941.066757] schedule_timeout+0x4db/0xfc0 [ 1941.070907] ? usleep_range+0x170/0x170 [ 1941.074877] ? trace_hardirqs_on+0x67/0x220 [ 1941.079210] ? __next_timer_interrupt+0x1a0/0x1a0 [ 1941.084237] ? prepare_to_swait_exclusive+0x120/0x120 [ 1941.089422] rcu_gp_kthread+0xd5c/0x2190 [ 1941.093538] ? rcu_blocking_is_gp+0x90/0x90 [ 1941.097884] ? trace_hardirqs_on+0x67/0x220 [ 1941.102200] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1941.107307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1941.112852] ? __kthread_parkme+0xfb/0x1b0 [ 1941.117098] kthread+0x354/0x420 [ 1941.120468] ? rcu_blocking_is_gp+0x90/0x90 [ 1941.124778] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1941.130309] ret_from_fork+0x24/0x30