00000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:51:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:26 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000440)) 04:51:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xc135ec0711d109a2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x5, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008bd4e0000697000080006000000000008000600000000000800050000000000daba3209e3e6e75a92b1fb1a2c1ca569190f6b856a4b5b3b037e6cb93b31de3382f4f06c69990c9d00a10ef66a32abe3727cb98a308e318c44c569fbcf2f35d6789ac83337b92f99bc8a71d43e99a0932ddda8de2f0b498a24e6540beb62295b0f767c1140d5dbc3f4797d101e3838731ecd63a1dc820c00e9b1043f0e49cc8cdb225562ebfd405041ecb7641dc04d036e7f1e156c2a0ed8b4e7a1b4267d1854b4b634e69ae3"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) [ 975.760190] net_ratelimit: 14 callbacks suppressed [ 975.760197] protocol 88fb is buggy, dev hsr_slave_0 [ 975.770340] protocol 88fb is buggy, dev hsr_slave_1 [ 975.840378] protocol 88fb is buggy, dev hsr_slave_0 [ 975.845535] protocol 88fb is buggy, dev hsr_slave_1 [ 975.850723] protocol 88fb is buggy, dev hsr_slave_0 [ 975.856067] protocol 88fb is buggy, dev hsr_slave_1 [ 975.861258] protocol 88fb is buggy, dev hsr_slave_0 [ 975.866349] protocol 88fb is buggy, dev hsr_slave_1 04:51:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000440)) 04:51:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fff, 0x36008489eb9ea91) r10 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r11 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r12 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) recvfrom$netrom(r9, &(0x7f0000000300)=""/122, 0x7a, 0x100, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000440)) 04:51:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25cfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2de}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:28 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 977.840147] protocol 88fb is buggy, dev hsr_slave_0 [ 977.845316] protocol 88fb is buggy, dev hsr_slave_1 04:51:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000440)) 04:51:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x24008804) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x20000, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0xfffffffffffffff7}}, {@mode={'mode', 0x3d, 0x1000}}], [{@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, ','}}, {@smackfshat={'smackfshat', 0x3d, 'cgroup'}}, {@subj_role={'subj_role', 0x3d, 'vboxnet1:vmnet1\xa0user!#'}}]}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1147, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r5, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) write$binfmt_elf64(r10, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x9, 0x83, 0x6, 0x0, 0x6, 0xfffffff9, 0x128, 0x40, 0x31e, 0xffffffff, 0x337, 0x38, 0x2, 0x8000, 0x8, 0x3}, [{0x30000000, 0x1, 0x7fff, 0x1, 0x7, 0x3, 0x7, 0x2}, {0x5, 0x4, 0x2, 0x1, 0x9, 0x6, 0x1, 0x1}], "da397a89f9450c6e5238944ba7da48db47dee223c010ab0f373e2c25657d25afbbdd6dbbf5caa1fdaf91224f8bab2cbc9da0b39150a28e28f52eac9b9080e630b27f05b771c5f9681e7f4869c2e0e81a0339b12756664faa71a9283740a1385114a577d2e84b55cc8784", [[], [], []]}, 0x41a) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 979.292224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pig=30349 comm=syz-executor.1 04:51:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:30 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, 0x0) 04:51:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b00730000000000080006000000000008000500"/50], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1e, &(0x7f0000000080)=0x48) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="56000000cff398904d212cdff31a362095e10512bf302f6401d92eb033cec24cf34de0d80cc2", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, 0x0) 04:51:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000d97017efff4cd5cb", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x80, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x2165d674}}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3b039b3c, 0x4, 0x48]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7f}, @SEG6_ATTR_SECRET={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0xfc123f0a83d0b040) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x6, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="a1dc4286dafd1a81aedb70949f659c6ebbf13fe779c41a01faf0f73136b3b2994d2999d94c2e0eb994282348075a869a65e73add0fdb5aafbc16ae9e54eecd3c9ca01d1d02b92eaae33a09d27febd52254ca418fec6cf483f741a5e1194b3d217356d9face7d7222cb6a88429f4c62549dc146d37fa20fe3", @ANYRES16=r4, @ANYBLOB="000081e2959270c53a9da5a45628007000ffdbdf250500009629ff000008000b00736970000800060000000000080006000000000008000500724d6c23216ea717bcb79046a0ab0c080d2a8d03e1283e1910c3666ce626c013e81ae51c865640ec3985a87aa120cb7678c7aa8a01040000202264ddcde30537a03b36a7ca4735771b15fcf676554cf76043b8b8ca79007f6c67317ed44559d303435e36a924fca7a3d981268b8a1407fd7b594d443390f4a45ce4f07ec6cf91c400007be79c3800"/209], 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0xd0) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000600)="2cbf8e7dcae6508e1cb42995b99d5a18588378f58d765fdd4b6d07eaf3d57fc9265c06b2d8d9f284054a5be4e9291896babad4e325245728862ef5f8acbeffea3687ced440490156540ba1a0c98359e8d2d588e9aa920328e1bd297574158250651f5693f5a60c4825af353648c44558f9a38832466d80ca9ea2782bc4bb0b6828d61958f17b7dc0240e7e4feb4367b98f624e785df6d3dbee4ecf346e9f49bc605ba69fdbd3295bef2d7f7b481ba9eb77bfee0b06f7fc8cb59aac7d7e6e8597c3d87dd18f0fc2d8dc2af9b13cf3dea7f0268232e522c3e92d72f2a0e2f6f93150aead1c7e63a72381389610bc7d249551", 0xf1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x3528a9c0}], 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, 0x0) 04:51:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 982.000144] net_ratelimit: 14 callbacks suppressed [ 982.000150] protocol 88fb is buggy, dev hsr_slave_0 [ 982.010255] protocol 88fb is buggy, dev hsr_slave_1 [ 982.080159] protocol 88fb is buggy, dev hsr_slave_0 [ 982.085327] protocol 88fb is buggy, dev hsr_slave_1 [ 982.090533] protocol 88fb is buggy, dev hsr_slave_0 [ 982.095629] protocol 88fb is buggy, dev hsr_slave_1 [ 982.100951] protocol 88fb is buggy, dev hsr_slave_0 [ 982.106042] protocol 88fb is buggy, dev hsr_slave_1 04:51:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38060000", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c000100080009002a000000080006000000000024000200080009002bec000008000900ff030000080008000600000008000400ff0300000800050000000000"], 0x54}}, 0x90) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:33 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005) clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa71e", 0x5, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) 04:51:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f3646023443247993ff5d492b41fd983f79e65199615607672c59957ab364bf68e6fae53367f05f4ad61421349f2f11e931e7d62ead5e7cd255560c8ef00fca4fafa924edfe926c5aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d26d15b6210d53eed19bc0080000033270c462c0200643cb328", 0xbc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 04:51:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0xf4240) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x4, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 984.080181] protocol 88fb is buggy, dev hsr_slave_0 [ 984.085390] protocol 88fb is buggy, dev hsr_slave_1 04:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x30, 0x6, 0x0, 0x4, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7021fe71a890adb07595ed3e1f00ffdbdf000000ff0000004800080009007369700008000600000000000800060000000000080005c90000000053fab76062e63c803e926024fcb6801052c5ac55491bbca863f1c424917d0a8785078a424b629bc8405c2ef6d8fee26f07115ad8c05428119e45e36eb9c03b9190245bc8008f2dcfec66e233af42275ac02f183e55f385bbdc5d2f390752ebe4317ef4b20cc3ac1c35ab233190d4f2eef2bd440b9c6497418c0b5e589fac32fa0d4de314b445a12fc289ef1192b5dfaf31c987bbaad499fdb158ba5f31ac44ba81f5308d9dddd03825fb13e82b6bd0d4b6f68f191f3076d3e98ba822dbd52f14fef56242a14ebd4f66f7ce"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$rose(r9, 0x104, 0x3, &(0x7f0000000080)=0x8, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) exit_group(0xca5) vmsplice(r8, &(0x7f00000007c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) bind$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:36 executing program 0: mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) madvise(&(0x7f0000c6c000/0x13000)=nil, 0x13000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x100ee, 0x0, 0x0, 0x800e00572) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 04:51:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='Cpuacct.@TE\xae\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2300, 0x1e5) openat$cgroup_ro(r1, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x3bc57a74abd2ea60) fallocate(r2, 0x8, 0xfffffffffffffffd, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) r3 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) poll(&(0x7f0000000080), 0x0, 0x40008) fallocate(r0, 0x800000000000002, 0x6, 0xffffffff) r4 = getpid() ptrace(0x10, r4) ptrace$poke(0x21, r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0xd1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, r4, 0x0, 0xffffffffffffffff, 0x3) close(r5) r6 = openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup2(r5, r6) r7 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r8 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r7, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) dup(r8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 04:51:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c000100080008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x5}]}, 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x49d3d7b6) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x2dd, &(0x7f0000000680)=[{&(0x7f0000000180)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x9c}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 04:51:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7cc30000621d0f8de8265ddf63567980faa9be7df32c00a06e530a643eb9c729370843de0e967a35df9048816c4ab8df49e4887d6ab7c1a535f876861cec7f190c24163bf232b17316dad4f2a75ca2deee3a1ae566b6234bad5849e32316e39255a14d8b9774c21e954090dd74fcb5742af863983c6002344025112a93d4c60b7e4065068343ebab6ce1366961544b3e2bccd236e167cf75c41f5544c906f2bb4ea0f9df5cbb40ba0e17dbc98c34e15990fd", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f0200000003000000000100000000000000060000000014001462726f6164636173742d6c696e6b0000f44c606a345836cec9bfb6089594ea8f9e2e7f4224031741aaf18e942fee4b1f133efb759d27b241ffb2dec7b9675bf41f13f7a3cfe79a02e234fac2bf7806f5c6587ed4972e4d99fd3a18264b2b7a72771187ffe09ac6dfedf2654feab3be9b83c2f16ecf9b69243b2f5a226f552f731f40eb304e91136223c0f9a53a639539a6dc86e72b8ead934879c788d21a898f39b5b0008792642161db225cf863a15204699b182b4b1208386ce6b95a89048ed93f7d"], 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r9, 0x400, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x10, 0x5, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r11, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xef, "c4ce8a43cefe6a9be1e32d67027ce1bf272266338871bafeca76e5c5b055079826e1a27764763f2078a4ace46ebe3464c213e0946c8fa82114b616cc7d82253a8ab896c9bd697aa807bbc856b37a164b5a05db9765ee5c383ef18fcb368077ec9fec202b57100e943d38a5e208c773a4016e41b7e04c134289375e46fe5b16188c94b2a44555b8733cdb9f6e2f58a0106b2111aced1fb8aa1d477a60645f6ff3feb7d12887703d4a584e8048bebbea5b72666c29a34a1a83f8a1105ad29b4df3f21af938c0987e71686692a2c9f350a71c651a24ea3c722d45731371d019bb7e8248984b151850a36046e7f4302722"}, &(0x7f0000000700)=0x113) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 04:51:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f3646023443247993ff5d492b41fd983f79e65199615607672c59957ab364bf68e6fae53367f05f4ad61421349f2f11e931e7d62ead5e7cd255560c8ef00fca4fafa924edfe926c5aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d26d15b6210d53eed19bc0080000033270c462c0200643cb3285d7b1e821039a85ad8b91cea336a1b57ff5a0788e3ab", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 04:51:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\r', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b007369700008000600000000000800060000000070faee160000000500"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r7, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000300)=[{}, {}, {}, {}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000d4db3e8d662455f0f64685f7fefe0bd178e794218c06a7b8f46d6133139a2a6ff8df051bad8acd48783cbc90fb9ff1d498689a3dc5c8225e921cd612be30645346bb16f2324d410d889abe053b2cf82a5164c11e3f939a353f1df14b7cf022db6ba9a81c6c515b4e835c644b5af1f767d16c4775805450a0a74b72da45da547903f74501887b82", @ANYRES16=r6, @ANYBLOB="000028bd700099e6238afaf74c506077a8ffdbdf250500ffffff7f000000007ceb0008000600000000000800060000000000080005000000b461d2f42e7f38d13dad72d060b512e945a7fef1156f105600a07b75d9182c665dbf26d9d0e56d81d21d1e0cd670dcaec022eaaf0c85aa565561947289e598f246207870b0976ca9e426763eb30bf8c43e9f6652cda2d13cb9c64563694f8e82178b5a89c73ef680c916a35140072142640000000000"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='c\x8euacct.jer\x00\xe4\\3\xf5\x7f\x86b\xaf\x9e\xe5\xcc\xe8\xa6\x13\fO&\x86\xf3V\b\xbc7\xe8\v\xefT:\xc3q\xd4\xf7L\xc5\xab\xee^qd\"\xec\xb3%\x01\x93\xd7Y\xf2,(*-\x8cpQ\x16\f\x9d}\xc6J=\x8as1\"M\x00\x96ATf\xcbM>\xfc\x16I&#\xf9\xd4\xbb\xd6\x13;\x89/e%\x9c\x83*\xcd\f\xa7\xf9\x1c\xb6=bR\xe8\xb9B\x14Yw\xee\x06\x9a\xe6\xfb*\x8f\v\xf6+?\x82D\x91\xdc\xe1\xac72\xaeH\xac4)\xdd\xc1x#\x94F\xa7o=\xb7_', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0xfffffffffffffe8d) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x8, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000), 0x2f1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 988.240139] net_ratelimit: 14 callbacks suppressed [ 988.240145] protocol 88fb is buggy, dev hsr_slave_0 [ 988.250269] protocol 88fb is buggy, dev hsr_slave_1 [ 988.320121] protocol 88fb is buggy, dev hsr_slave_0 [ 988.325268] protocol 88fb is buggy, dev hsr_slave_1 [ 988.330466] protocol 88fb is buggy, dev hsr_slave_0 [ 988.335542] protocol 88fb is buggy, dev hsr_slave_1 [ 988.340733] protocol 88fb is buggy, dev hsr_slave_0 [ 988.345801] protocol 88fb is buggy, dev hsr_slave_1 04:51:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b007369700008000600000000000800060000000000080005000000000014bc9e5fdcbf04f7eaff6b623c249148d9f066015793a308645abf47ceea9ae7c82047654535e3bbb1868710c4b09c9252be356713e4b756c8c4a92b6180548828991eac4d1192aeb716303f550a7079c3313542e2de06da080000000000000005967fce9b603aff93f2b3c13a6ad9dc748436c71a1721412158924266a6a9cc330bf69ecdfb053096d7f0ca24928832068aadc4d05fe1e9c0194bcb4f19d62168a538"], 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = creat(&(0x7f0000000100)='./file1/file0\x00', 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000080)=""/21, 0x15) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ecff27bd7000ffdb5f25050400000c00010008000b0073350d00000000000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = fanotify_init(0xa, 0x0) read(r4, &(0x7f0000000080)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000aed29edc7a9084431036b41ee92e40f71d601a294684f3484faf85e32c9dcd32955fdafc3e53f6dc659cc8bbaf58c4b3b7bc51b76b22bcdde8684aed396489f12b950c62f3151cb940fca34e73a22eb2a7a8d0eec70e9a5026d40ef065aa048f5b7d563478e3606daa7fb0b663e5c2d44af0c330bb631bca5f7d9ba1b6b39083d49315e4eb3d93e312a0f5f9de4c93fffae0f87a813fb641f8997f5e0324436c9206f99b90587ff32c511cc4cbeecab7b9867628d026b65f176cb99ecd2deb6848ba91b18fc45053c88954dc8c4c", @ANYRES16=r5, @ANYBLOB="00002cbd7000ffdbdf25050000000c000100080004004e22000008000600000000c6f4f607486bd07f2790ea1b05071a0008"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) [ 990.330121] protocol 88fb is buggy, dev hsr_slave_0 [ 990.335273] protocol 88fb is buggy, dev hsr_slave_1 04:51:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0xfffffffffffffe5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) read(0xffffffffffffffff, &(0x7f0000000040), 0x4) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000a808000b00736970000900060000000800"/38], 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38d7a19fd846653ea6734c4e00", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r9, 0x2, &(0x7f00000002c0)=""/106) msgctl$IPC_STAT(r9, 0x2, &(0x7f00000002c0)=""/136) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000004c0)={r8, @in6={{0xa, 0x4e22, 0x2, @ipv4={[], [], @loopback}, 0x4}}, 0x9, 0xb49, 0xffffff80, 0x5, 0x6}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r9, 0x3ff, 0x9}, &(0x7f0000000240)=0x10) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r10 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r10, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r11, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r13, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r12+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r9, &(0x7f0000000400)={0xfffffffffffffdb2, 0x1, 0x1, 0x0, 0x4, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r6) setresuid(r2, r4, r6) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r10, &(0x7f0000000040)=""/11, 0xb) r11 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r11, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r12, 0x0, 0x0) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r14, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r13+30000000}, 0x0) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) 04:51:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'sip\x00'}], 0xa, "fe404032832cdc35db490f55039c0c0c505ca59c188a2017b8d57efb5a181b9b66301bacca3b81c6dbb3ec9642f882f31973bdc32b61b5ff6cb105c377495096f7a007dac9cd86858446dd8c323e1a6b0c57c858d623d37dbd7471679756ee068d0c437b2ddd1c"}, 0x77) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000080)=0x7fff, &(0x7f0000000100)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) [ 994.480120] net_ratelimit: 14 callbacks suppressed [ 994.480126] protocol 88fb is buggy, dev hsr_slave_0 [ 994.480179] protocol 88fb is buggy, dev hsr_slave_1 [ 994.560140] protocol 88fb is buggy, dev hsr_slave_0 [ 994.560192] protocol 88fb is buggy, dev hsr_slave_1 [ 994.560286] protocol 88fb is buggy, dev hsr_slave_0 [ 994.560333] protocol 88fb is buggy, dev hsr_slave_1 [ 994.560477] protocol 88fb is buggy, dev hsr_slave_0 [ 994.560517] protocol 88fb is buggy, dev hsr_slave_1 04:51:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:51:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/\xff\a\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000086c08cfb63b2f02bfa68f8576f9614f05575ef68e454cf30fd291a868a73fc36c977263160f8baccc4ef448dbbb534cc304c33cf73515af2c4cd53b18960bf2af309d83c46b2efcd72630cfe2bf2cf9e649ff3581a6b473911ec349368517a5b126882b45380fbbbe222b93b943286bc83741d34d83eb9bfa34e137ab6996ceee40562216338eda36a1dd4905e8b6927a0a64581e71f00000000000000db0afb06d7b37f36a8f64913dfc23cfff16ef2d1b8d0f95e9984b200364804556933bf38", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8000000100}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x16, 0x2, 0x0, 0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffc}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7b00ab1a", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0101000000000000000001000000440001000c00070000000000010000000c0006006c626c63720000b44f1f43232703d200080008000000000008000900000000000800ce1092db00000800050000000000"], 0x58}}, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xcc, r10, 0x534, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x858}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x46cb3b28287f0c55, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x10022) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa1ee, 0x0, 0x0, 0x0, 0x0, 0x4d6a}, 0x0, &(0x7f0000000080)={0x8000, 0x1c59, 0x0, 0xffffffffffffffff, 0x0, 0x3f}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 995.855129] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 04:51:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 996.570150] protocol 88fb is buggy, dev hsr_slave_0 [ 996.575325] protocol 88fb is buggy, dev hsr_slave_1 04:51:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x0, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 'dh\x00', 0x8, 0x4, 0x5f}, 0x2c) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800400004fe9f307c63c582456c61e5a3b6ea7bcf9b239d414658796a634209710bcb14a048f495c2be5f6344e7373302b48d66c634ffe9ac718ee651d13da288bc9b59fe42fda29b29b2f95dc252f727d04ea4bb11b17423ce8ee60a328786092a51688fa6816fc020708139e72dd2ef85ca2adab521e4624d5d07", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10000000000, 0x0, 0xd09e}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)) 04:51:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)={0xf97cff8c, 0x8, 'SE Linux', "6a3f6a7236f4eb71a47122884140963677524b0c49be8a078beadeb23b14a239bf03dcccb1b7b3f5a00b4bc74047d8747faa0494289299ba9f2819c3b9c06c2629e835a20f181ddc4e925085cd37f26e870f4c32304985e87c568717d7d7a1b410eed5759d2907aa2d8630855bc249fda84ab1ea6b379073c3fbacc24a3294ffd494f10b65a37520dcbb2e545797f18ea47d78c85559565022e933265dc6715212bb780bf85208d29ba9453ef4d04c3dc20dda8adea1f6ed3205c7ccea87b08b336ced7d103d63bbfbca70c017acf9df5d249d465d2a730aeafe0fc784f6b1f52eedcccabe3f3e66bc"}, 0xf9) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a1ccac3f", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x101000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r7, 0x80044dfd, &(0x7f0000000100)) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 04:51:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:51:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendto$inet6(r6, &(0x7f00000004c0)="f4bd259be4d416fba6220196c7f6c74a86126802253b09073830cbd0f28097f30b506ceee4ed7439e7f2049833ccd6ed6e2331212546c9916017c7926aec02fa6ada29f696dc7ac5288e27e2c419711347facfab6a3470d4a96333441422b60ff5c80486bfe530f3c44ff0f2f67cad6014e949644e6dc0ecb8a75a0fc4828f4e5cfa69c80a371669941b158859f5ef3338543cdbae721abdebe3c3563c959d1da651de2caef096ee3b38832a87143f4525ceecbab98ed9f77e3d820679ae21e18bb8b14bbe596804b34394a27822ddd8f9d363daf4fc43ed3b639017f0ea7580d4d98a1b979acc3c999db43569d7", 0xee, 0x17f77dfe1a81b85f, &(0x7f0000000080)={0xa, 0x4e21, 0x3f, @local, 0x200}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x14c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa09c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x728}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68169ec6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x0) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xc42e}, 0x0, &(0x7f0000000140)={0x1b8, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800b9b34b8800", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) accept$packet(r11, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'\x1datadv0\x00', r12}) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) writev(r10, &(0x7f0000001680)=[{&(0x7f00000002c0)="46de22e0bb422ac398dd876e50d0d831d597857b62a4196133d30c72e27e8022a7bc26280ddd36fa50376b8f870762da13f6e8caa0c6c278c69a192b8a047d16966591f8e1278144eba4b4cd0d889b17a49067a6", 0x54}, {&(0x7f0000000100)}, {&(0x7f0000000240)="c5849b73a301380def73e0b96d", 0xd}, {&(0x7f00000004c0)="73eb38a56e7f174a21df811b61db5c00c98d00a09206931c44f760f998eb97a01c8863d4cfcdbab2f52f387cc7f204fd7c963b011677a87bfdd1e6378be4a119c4ef32ea68b175dd1f9dc1513d43cb522ce0ff1cd130a69843b006ae3d641a34b68b669ecc64cc88adccdc1386aa5e01d9165e758e7893de8a97a3308534b01060698c9e", 0x84}, {&(0x7f0000000580)="b593b580f80d33d81bd071c748ee595b7356d8dc28def435f0376b4e8f699060ccfa783b8d170503075660d3e029d3258e9952e2dddae567ed0a0a31fa334694da113b25ffb5b94090dcb6239d6f9970ad2874c0feba32f1cf9c103a75393871daecc02a5f9f23063ff36c23313f0dba47569a4a11f3eea95ec0d2df1377346b71c12b25993bfb9b0e3cfd08cccd9a4448e1886a11a1fdc1fa83f7fae3928a6b6fe2450cea7fefbfb1f03c7a5f70741254b707b69d83ad8e2d2145480e0054586dc7a273dab4916b8261e9603de0d712e0f3ef9a57b695d448707a70a7718c10b84753eaff62baa0590c911d5f0a308c613b95be4aa139a5cfdbafd425cf1e8280e9b433ee09a55254d50a72406f839eba198c50cbad706a8953756c7657fef8068e7aeda183db36e2121a11a724588225872ca9f996b293be3eb674735cb9542cf171efbb3b3f481f87de1e0618a5384f4c8b34760ff8909b151afa3b7e73119e0f01326e1958120df4308c44ca7f1793bba702542337008ead433dfb6314a440c3b93f637326c1b6d0a2505f361ef1919acf095b948b32079ec3046aa6e1912c12824f2c8a6798db260efb77f929effd68c46c8e2f6b93737efdc41577140579fa6c7554d8ddba54b2bcb8ec0f386148e1a75ce1493315de6d998ecebcf72233c0740afb3312959dd5701b03ad04a855afa74d82ebfa5abce17066ed2cc5e282907311853da637216617b0ea9c77998052d0ebbfd2aabf164407f5daf2e460bd58dade8e0f79c3976a53923da7fd973bb795282b069d10ec6e78b8de0cf0e02ff1633f30a4f5b36cd59c2c02ebef97dfc394a274efec50a988147c8b39435bcb04cd8442aae714600cdd62e995d9e66777eb2a10624e49497943bff5d42b4c120cf6351a59273f57ef812466cf88a33d92a5971949da13cbc0029d83a6cbf902cdc0cfbe15d51c0fbdc1617304168eb9a1d380095e7b3734eb608434b06b04dcbe92230cb135aa87e0a12f0422315c5c14447e6942823b7b2691d02f217baa2374064197dce54152db75665c69004004bc2a86acf8f40d1994cf54ad8d19738b9abb92cc72aaab4bf95cd0d6623f19998a47119433ccd45867ae25b13ef5e46123c5aba0503e2d2000a544d5b204c454adf2319423e3c13311dbfa03cab7b5de8ea1948ae5a6f71d7e8cd8c30e99511cc4b0aee16949c48e1ca9c1fb216e708193f682ab1a414125b4fb54ec0fd7fd7458559832b3157068d67953bae78de074e1658dadeb98315b648beae34e5750d33eb6f0cbccece57d0e63f4802023b595af8161d25992f99baadf08b529de1a458e0236deb7a5703229b7fddfe615b59ebbd341996171892b6578a54eb4c7febf83c0e74743b2c458ca1d9d9318c672201653a8f19004390c1e77f0064e120d44f27d62d5230fecdf16e0df0c3dfa2d53860b57111490d0332790464dd67d16dc4f074ac237061e2a49be7147eb67b91406009be972ee2086141f9b35e9a03dc6087fa6f5d4661d9aba8f7301cdd53885c8b7ee65a7b98097a42ddea707720d6486db2480844062d98de4790488f11ce28fd635ec87a06b2aa6cd945e72baeec2527fb55556d958852da9d546d06f95564e36e3a8ab76acdbbb68b7fab77fc898090a91934bfc859fd41c69f7d32e8642377de694c08059ba193a66e070b802782951f650bea93b82b0276a41f884a91e131344e1c5cc067d0f8ca092b9cd7d2d89e5e3a3e8abbb036f246e7a7a01d90bb5b8db416e820ab3d9ef846c1cbc0404c5ad6cf1cca3d0f90ebbfa97d14715db04c13c77aa3f1eaaa17853e323ccb4ce260714b58c4bc5bb94abc5f7b9db59d46f7313fbf8e28dfecc79c2947948c4cd598569de6cad694718e44fbcb093c4b1cd491683da15b9f91020ecdd020ed9f4af4f63e759b5d21567f8da6cc17bfda82018a8972b308b5b355ebbdc44a28aa629a16a69b85cf9d2d9cc7ed353571c1187fd20069383fa592a727f884b95c3424980cb068b6daabeb6b56c81b26c5d57399e9477394319042bace07891254a4bf2e55f50dd840f7664db36874ee039956facfd1192ffcfef7d05137919f6f80273ab45f7f73634dcf66246881f9a425f921793cf3c19061f8e5a08bcd1cad517c1a583a72d54001816cd6fa48fd151b486267fc583c63f7bd816712475eb8da4dd3ba0f31d1a7147629e573af9d96a70a168a1762716772a343afa7abeb89add9556ba57aebc3b581b690cdb5aeb68da210177f9e3a5b988be09eb9ecfbed8b62e301f3a92c7f5cfd9f02d29d82f6160ff066078782ae9f9a5ae46b1ead8574caf6adae09d495ad41aa7a5a644fdb791a6c58adc57d9e20df274026774901e24912df2f46cb11eb5e89e734d5e831a8cfa38e573c00c054eeb955d73f3c0d1e4335e1f19b79c1ca7e8a5b16969ad07da2128d1e7f149afb543f839a9423da28b15250153ebeb85fd99534ce4e9af4d47385753f16ea312ef45ad5cfd07e8324c6923abdfccc2b8db3cf751dbea580c0c95a73a4327870f19537daedf5c92497b067d773e6fbf48f0a243586aa81f0aa0b8221c66c0249780d3023111087606f455850c8921e219e64fa2b4747b98c35095719729d9b97014479fd628975ff02d878df3439db39fc844b9a0bce6e599dc786aa8c979b07297472dd451f58dfd886813bcedc33ee57ea56aa5ff8c44adc6bfc366d2c32a47264ddc3b1fee08cb101710a4f78ac120faf24231b2fb3842eb6ea7b1cd0a26aa2ed6d47c755b3877cadb5e1f3f2892226c47c6021eeff068f2fddcf64a4943f85205a482f50bf454317b8c918a43ea1c8982c1cc8d005e4f2a89352b95d7e544b06f18dc9779adf296c8045edf5f1862c8a5b12e0f6965406cebfe9ae422e5c6e4871c70e20035a4fef1f5f817c836fd73f58a04fcc09527b827038e0a3e3faec6f5b6bd7261a1217e4cfd19149cf4008ee2198b51ab4ad6980be95548a32802a740575f863f50b084f51919c57dd9d186e2b74465f9e913775407537709dc2f77deb6dd15a8738a7718185ec5e4eaf8d4359f67cd2a60fd9ff00a89e4033b691ab8a0e463b72621431d7a1a158ffe83629059b7960a57e2ec118e09879d444adf03dde00171d3ee711b8de14395fff5831f03fe54a5bd9877d13cd69869128cc71a8e78ecf7473d185cd7bc9393a31712f9aa4bc6f3c286faf60669e96325f80ffd8429401e1f83e0587b2a9846f69a2d4ee2663a1a943aeccfad781eec64674d5d022521cf3b4973ca0a1752813f8caf8a3886da90080fc626c3dce96178ec416c2f33473962213dde285779f6c33c481a419aa721aee85ad6a0ee88b7aee4463b3f169339dd973fbcb6c8210b5b033f9f92334adf4b5c462c2f5c414c8df325049096a0f7436419f4cc46c33652ccd1bb37208634b3144299347e1ee97b6bcbd767b16f4430545324fc93abc71c22b8bd6d1460fc7b76b7b4b5a3f4ceff13ca0266824ff5fb846a7a05d2a63b3c0c8e98a399c6e60ab066dbc3575bf407963db1f355f4e1a345018a8e299ad64f903132bf8d0430a40dfcdbc3aa7fbedaca65ee35c939cebfd39d0a9afdf4ab8420ea512f372578600af187094934bef0257102ca58c272915e154aefeda1b00ed0ae1460211412372d4650c05460957a9191530c2e91cee4398b53b84d1fd47d016e0239bd34a5898caa7209bd2e5f3a74ac61f6d813541345b05f34804da0197789f7694e80f97949823d579bea06d1408a5c0f75337f834a4e3b254725774a01e9af088d56361ffc8b1d83d78402e519c28778a981275632613fb3481b13ea094ee562b85cba1ac95f3c7a4536d3c9c4630f1cf354b1ac006cd0cd7a21cda086f68146cc7b380972d971ce7cdc836ab4eb4475b9423a7081c87f3a893b46ecdbccdd18c08054df42360b14722cd53f6a48d11723452b52e72b77f5d83a7e413d5abfa6cbd490b0abe42b14229b38f56324c73130a8f967d1267f694cde34b4744475001ffe7f0b092f52218756b33cd6eb3c8c4c185b4f4f891e0c54e804ad8c8b3c9ed3215455de2f91bca2b145cc8dfff22c79db532869e4269ca20425fa68c38fc730f2a78e00145ed7526db20767d58c1d8b1dbb43ed148d54a91d299381cbc3e2e9053c8f497111170ea99e648b6e19e24fc7b9575ddab474fccd483f2d33032120cb3010b008012e3b00caf830458dfcf6f13a525a8516049b5192d60864f64267d29f0df22c9c2d0ec7aec1c58a8718e6c4bf9d2367a6b791b22e503c6f2365fceef54eb31afdfd5973b7b1b8b2338e8805b1a83267329fbf3949f8f827b6e6771fc1a2099be01aeaa639920c3fc041f5c1d0151b26eafdbb5ed74584fbc860f817b3a9ceadead6c540e5cbf12537caf501a1c40c93bd7bbb5ea6436e08aaca907dbc694c2a4dc98c12c3ce127bc005d8a1e027f2e9ca8fb04d3566b6de2e2951f13c5d1af1ed70d160f54a6b6b8ee789a38406a44a034b78037b83b67b35ae319d55e88a3dd5e2b53e97bb24d4d8f174b8e9751a9c2a5f37e2279fd38ea7d616f5504502cfe472a35c08bceb8e2adc3574df76c10f3c827cdb1a418228afdc7cf06b84d497dcb1efa223d36164736b76e756ea5c2d51e4528612b0ab7493156f1de3bb2840ea7d3c94974812c3e8cde7234427b0f2ce46196c5dc0ff9d15eceb431f7a086ee178d692030e5b0844a93a28cbc10fd9685a3cb846c0888e868dbd2dcb42ef8cf466d93ec88b31c97181a3328834724de773110b2cc198ce3ef84a49e0e3fa18a830a8919e108c401fcd10bcd0a495c32025040b540029d2218bda69528c0c1efeed2ae942988b7d105fd24a580d84995a3a4e05156a8ee06cade509ae8d36f66b8ba22b3f526ef30782c68deda472a94a2acab9ec23466073ab13c80dc8a5ac59cc107daeb49ec5ba20b16a1db92a296c8676c856717f7a565acedd03df8a20e68eef2ee381170e453af93833599962ec86ce1835a49f24465d71b276a05b6e45608ef0ea9e1ec457e3dc28754195ddb5e74b84d4c47c16e508981734f52fb1210947e3648e068d990bdd259579001e737dca69690b72514aab7cda36beedac067722eb790c4a10a76d517dcaefaa95448618088f05fb542e6d7098813b4f6f4b40e7c8bde573cc5dc7fdfbf2124a2db76869f2899637432797edd15fd93f75dd0acc3d9d6040e914174daa7f6db2f61cb94b022ec79453de087785f427bb6e70207a34d10690c5aa61ae87cdbb21f47227e9496fae5a19be98ff83f739cfbf73d63c8d88ff9f06664c4cf4f000b26f3c0a1946e46592cdef0c12edc838aa18993ee76c12c1dc0d62e0fe53e3a72a8e6b5f916bb29afd4cbd77d84f21be976e44a2c566d35a797716ba165b28913c85cd7d43b590bd2cc59a6ed82d6e7710794f58435440c053a6f21b7d788ef5056c349de56125e6b6b56916fc49a96a11ddd0621fed3dca70e6bdc192d2c493ec3f9159fd349b2581de25168a3538f3309513801bb051a2c9e4211691b4c0312d1db664ad4489bd8289b8480a1c76fa812ca68efb6c00e59e7cec62c0b9926fb3a8d01ac313fd26efc677d24518ed6ffaa75df6f8148e609005d5813affba6674a3e2812ca7f669d5cebef5aa8e6ac8d3c9241bb98759fcee7ae7ce55cf278cfcf0e577e2908eb1d1c19240b59f81fc1eb05d67f35cde6fe2a22dc1576bfb4cd20553e844fcd6a1a248ba48e9ace0199e96190e8ad1bd208d04ce8405c5f49367e2980f5bb1891abbec2329832324cd3e", 0x1000}, {&(0x7f0000001580)="faf26a2f83e7e64cd8f6e699a07d00c62199c5bf3aa901c1f880571815ecfa23ccc8e33df5fcef634e2fa342ccfd639f7b5591dceeb7432e740972200132a01f4ae8d2b9e9d8c1023fff76ced1e57c5f05ef75cdb9aeedba2ec5aaf0e34f27fd4812d38f4b1b94956ea0967619f4a970f764787237e928693cf777801bba20f2053d1f48369633c84f100897053e2d75ff871989b4bf73451abb3a0ad6c0e4ca4aea8c69353396bbf19da1b5f68b328e0d421e913f1512d4a0b4a96702dafbb1b57ff1ce9be6d8dfea350c34f33a69a969222373c2c0aba4474b92b7bb42", 0xde}, {&(0x7f0000000340)="150366664da969cfb767020e11bd0357fa7f173a4b9dce07fcfec353", 0x1c}], 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:51:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b75a5410e8bb6d57c23894ae4428af21197afe82a46f5dc616b07072c7a4e81784e02c1fa886cb21e28af136c44e6fc599b933171ea49046ac49cee94f24030c0752c8d06f55ac236f", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r9, 0x2, &(0x7f00000002c0)=""/106) msgctl$MSG_STAT(r9, 0xb, &(0x7f0000000080)=""/61) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:51:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\t\x00 ', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 04:51:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000098de7449586869bd96b21bee2be6e680f07cde1f9e8d36a0e64939cf65e73757d996fb4726d02db4f428f1b4385876560acdfb40d1568d7e43fec7cd", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xfffffffffffffff3, 0x11, 0x40d, 0x0, 0x4, {0x0, 0x0, 0x0, r14}}, 0x3}}, 0x4004) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, r9, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x5, 0x0}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r15, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x5, 0x0, 0xfffffffc, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x3}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:51:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1000.720141] net_ratelimit: 14 callbacks suppressed [ 1000.720147] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.730385] protocol 88fb is buggy, dev hsr_slave_1 [ 1000.800118] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.805300] protocol 88fb is buggy, dev hsr_slave_1 [ 1000.810475] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.815550] protocol 88fb is buggy, dev hsr_slave_1 [ 1000.820727] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.825801] protocol 88fb is buggy, dev hsr_slave_1 04:51:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="230069cf", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x60200) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0x973, 0x7}}, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 04:51:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c0001000a000b00736970d50008000693d23af3ddde34039148ac17000000000008000600"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x9, 0x200, 0xffffffff, 0xfe27, 0x7, 0x400, 0x7, 0x7, 0xd0a2000, 0x2, 0x20, 0x2, 0x4, 0xfffffffffffffff7], 0x10008, 0x26024}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) 04:51:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x404000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bdee5de6edb41b259b7000ffdbdf25050000000c000100e2870b007369700008000600000000000800061f0000000035893f08631b00c981a0704c85cf9d05bb7a02ca20"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) r7 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r8, 0x9, 0x34}, 0xc) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1, 0x10000}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) vmsplice(r9, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) [ 1002.800142] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.805292] protocol 88fb is buggy, dev hsr_slave_1 04:51:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 04:51:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) times(&(0x7f0000000100)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffeffffffffd, 0x6}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={r8, r9+10000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r5, @ANYRES64=0x0], 0x3}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r10) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004615a9c61c3206c630016c817034444e3f19a57a525ea843ff15fd3182add5c5ffb9c7ff4a18d175ae4383caa32656ed328eaf115a1a46f19ac1fa3a8941b506d0b3f7351261c49c1b4df2f03f085a3e4f350fb38e9a84ed891cdffe58ef1fd148550b91d6b78aaf14795b7e0626756f5e231c060219dc652b9d33738a056e9e9f8621857f", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000a0073697000080006000000000008000600000000000800050000000000860cccebf62a9ed6b991e4cca01de8d45ce0ca78f13dfe76029bca9050af91f177b0486cc4512f6823dbad77de4df67bc49fb301ea08aef6a4dd191d2de8dd7f0100f2857de5fb2266d6031877bbfcabf8f7250c98a29d1052a29fec9e63d314b565f42a5416fda31f50bc"], 0x38}}, 0x0) 04:51:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r4, 0x0, r8, 0x0, 0x4ffe2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000028bd7000ffdbd725050000000c00010008000b00736925fa080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r10, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:51:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) [ 1004.457150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.471691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.485074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.498540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.511887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.525435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.538560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.566776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.644102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 [ 1004.658278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32023 comm=syz-executor.1 04:51:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev\t\x00tmx\x00', 0x201000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf250500000008000600001004080800060000000000080006000000000008000500ffffffff"], 0xfffffe7d}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x26f5df89b5ac9047, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000300)={0x1, 'vxcan1\x00', {}, 0x26bf}) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000100)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38fcff00", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) 04:51:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="381c00e0", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdb00000c00010008000b00736970000800060000000000080042b60000000008d40500000000003e1e8f28bc5b8cedee8f0634bb5123e08683bf"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x8) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SIOCX25SCAUSEDIAG(r9, 0x89ec, &(0x7f0000000080)={0x1, 0x3}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x2, 0x800}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 04:51:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x2, &(0x7f0000000100)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0x3, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[]}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r7) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) vmsplice(r3, &(0x7f00000003c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x101}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300), 0x31e, 0x0) r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) 04:51:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) 04:51:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) 04:51:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002679c0d7ffdbdf25050000000c00010008000b00736970000800060008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() 04:51:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1006.970176] net_ratelimit: 14 callbacks suppressed [ 1006.970182] protocol 88fb is buggy, dev hsr_slave_0 [ 1006.980365] protocol 88fb is buggy, dev hsr_slave_1 04:51:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) [ 1007.040179] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.040234] protocol 88fb is buggy, dev hsr_slave_1 [ 1007.040350] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.040388] protocol 88fb is buggy, dev hsr_slave_1 [ 1007.040460] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.040526] protocol 88fb is buggy, dev hsr_slave_1 04:51:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) 04:51:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x2, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000008bc0)=""/102400, 0x19000) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000004c0)={0x8, @pix_mp={0x8, 0x8, 0x3147504d, 0x7, 0xe, [{0x1, 0x401}, {0x1, 0x1}, {0x1, 0x8af}, {0x10001, 0x7ff}, {0x7f705757, 0xb3e7}, {0x3, 0x1000}, {0x2f, 0x8}, {0x8}], 0x7, 0x7, 0x1, 0xb41d9dcfcb572806, 0x4197b6c40e66711c}}) r8 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r10, 0xb43, 0x9, 0x3}, &(0x7f0000000240)=0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) 04:51:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008a10100000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = shmget(0x3, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r9, 0x2, &(0x7f0000000500)=""/170) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:51:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:51:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) 04:51:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:51:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:51:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffeffff, 0x3}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000), 0x4) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 04:51:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) 04:52:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 1009.040138] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.045272] protocol 88fb is buggy, dev hsr_slave_1 04:52:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:00 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:00 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1d77f748aed4fd17, 0x2) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r13, &(0x7f0000000100)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000100)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r21}}, 0x20}}, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x80) r23 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r23, &(0x7f0000000100)={0x11, 0x0, r24, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$packet(0x11, 0x3, 0x300) r27 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r27, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r26, &(0x7f0000000100)={0x11, 0x0, r28, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r29}}, 0x20}}, 0x0) ioctl$sock_SIOCDELRT(r23, 0x890c, &(0x7f00000005c0)={0x0, @l2={0x1f, 0xa636, {0x0, 0x20, 0x1, 0x3, 0x2, 0x9}, 0x20, 0x3}, @nfc={0x27, 0x0, 0x1, 0x5}, @hci={0x1f, r29}, 0x81, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000340)='syzkaller1\x00', 0x4, 0x200, 0x5}) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket$packet(0x11, 0x3, 0x300) r33 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r33, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r32, &(0x7f0000000100)={0x11, 0x0, r34, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r31, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r35}}, 0x20}}, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$packet(0x11, 0x3, 0x300) r38 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r38, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r37, &(0x7f0000000100)={0x11, 0x0, r39, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r37, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r36, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r40}}, 0x20}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$packet(0x11, 0x3, 0x300) r43 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r42, &(0x7f0000000100)={0x11, 0x0, r44, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r41, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r45}}, 0x20}}, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket$packet(0x11, 0x3, 0x300) r48 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r48, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r47, &(0x7f0000000100)={0x11, 0x0, r49, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r46, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r50}}, 0x20}}, 0x0) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket$packet(0x11, 0x3, 0x300) r53 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r53, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r52, &(0x7f0000000100)={0x11, 0x0, r54, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r51, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r55}}, 0x20}}, 0x0) r56 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r56, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r56, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) r58 = socket$nl_route(0x10, 0x3, 0x0) r59 = socket$packet(0x11, 0x3, 0x300) r60 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r60, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r59, &(0x7f0000000100)={0x11, 0x0, r61, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r59, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r58, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r62}}, 0x20}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000060c0)={0x0, @broadcast, @initdev}, &(0x7f0000006100)=0xc) r64 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r64, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_pktinfo(r64, 0x0, 0x8, &(0x7f0000006c40)={0x0, @remote, @dev}, &(0x7f0000006c80)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006d80)={'irlan0\x00', 0x0}) r67 = socket$nl_route(0x10, 0x3, 0x0) r68 = socket$packet(0x11, 0x3, 0x300) r69 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r69, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r68, &(0x7f0000000100)={0x11, 0x0, r70, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r67, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r71}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008480)={'sit0\x00', r71}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000086c0)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000087c0)=0xe8) r74 = socket$nl_route(0x10, 0x3, 0x0) r75 = socket$packet(0x11, 0x3, 0x300) r76 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r76, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r75, &(0x7f0000000100)={0x11, 0x0, r77, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r75, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r74, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r78}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000008f40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000008f00)={&(0x7f0000008800)={0x6ec, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x234, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x7, 0x9, 0x0, 0xe4}, {0xfffe, 0x0, 0x12, 0x400}, {0x1, 0x8c, 0x7, 0x2}, {0x6, 0x5, 0x5, 0x5}, {0x9dc9, 0x20, 0x3f, 0x1000}, {0x3, 0x5, 0x3f}, {0x1, 0x1, 0x1, 0x1f}, {0x733, 0x8, 0x7f, 0x200}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r30}, {0x224, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r35}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r78}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8fae}}, {0x8, 0x6, r50}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r55}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r57}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r62}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x4, 0x87, 0xf, 0x9}, {0x1, 0x5, 0xd6, 0x3}, {0x20, 0xfb, 0x0, 0x7}, {0x14, 0x80, 0x40, 0x7}, {0x18, 0x9, 0x3f, 0x61ae}, {0x6, 0x1f, 0xf8, 0x213b}, {0xfffc, 0x0, 0x1, 0xece0}, {0x7, 0x9, 0x7f, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r63}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r65}}}]}}, {{0x8, 0x1, r66}, {0xf8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r72}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x86}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x12000}}, {0x8, 0x6, r73}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x80005}, 0x8) r79 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r80 = getpid() sched_setattr(r80, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r83 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r83, &(0x7f0000000040)=""/11, 0xb) r84 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r81, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000c1d783e965e8d7dcbf5713c874f8dc3b77b16a62ddb88c4e0ff6d9fd58dbdb1252ca8108673f23930725bf7774792aa3e8d3b18b2f03e11dc5bfd558c07b91546d4d2682503ba755a0141e5e7eba02036b0dae4a5b99d163795dce6a14", @ANYRES16=r84, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r85 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r85, 0x0, 0x0) fcntl$setpipe(r82, 0x407, 0x0) write(r82, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r87, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r87, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r86+30000000}, 0x0) vmsplice(r81, &(0x7f0000000000), 0x0, 0xa) ioctl$KVM_CREATE_VM(r79, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x35, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f}, 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000440)) 04:52:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x338, r4, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x89, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000200)={r7, r8+10000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:03 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000440)) 04:52:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000440)) [ 1013.200152] net_ratelimit: 14 callbacks suppressed [ 1013.200158] protocol 88fb is buggy, dev hsr_slave_0 04:52:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4aca7da0fd7be1dfa4f198e4cde1963fa47adc00000000000046990d0b9d93582a175e9ccf33c7291109eb7d104db100f9ffe79b0000001000392e6846ad5f26ace6f8707e0e1f19f195936b18e9d20c0394ca0000000000000000000010000000000000000000", @ANYRES16=r5, @ANYBLOB="00006098f4abffdbdf25130000000c00010008000b0073297000df53a3d37b961908009c159dbc407fc27400000900060000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="22bbfc67ad382385a1459af68e1683de3df31c5b82935924463f3d06c4b9936acf1d9caed3c2216a9dbb12042c681d0a6ba7", 0x32}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe96) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'\xa2b\xff%\x00\xe5\x1f\x00\b\x05\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000300)={0x2, 'bcsf0\x00', {0xd5}, 0x9ec}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="19000800", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1013.210751] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.280111] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.280158] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.280237] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.280274] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.280367] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.280405] protocol 88fb is buggy, dev hsr_slave_1 04:52:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x82000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38e2ffff498d53ca20c97a4bd63b67e88327417fee70685f006c52914fb812a0e027f201414337b7a4033c8f6cd8baa33c93701a9df0149b91802730d3b87c493e1ffa0c", @ANYRES16=r6, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="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", 0xfd, r2}, 0x68) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0xfffff800, 0x2, 0x1ff}}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x98) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000980)}, {&(0x7f0000000d40)="389a056051651cf895cf6bde614729c730ce931295f6edfbf5f7b84eb92ba85c0b4d764b54d0f697b8067fb20792013cd25ed969bb1e5e4750a62ca75d04dbaa88aa04e755a3654ce6bb1b783bd062903dd421d314f28013801bc7206913ca167a2255737a530aee4448ce68c6d16b36d6ff4e05b9872c68675da3e05f692ecb3a1948c1fd5ed69f1faa52ac8f159e99a4a5072a0d6cd626d5d1f39ecdeac1b7a2afb866b120225165f085c7"}, {&(0x7f0000000a80)="0c25c2674c5ef830fef0e8c72f867c98f504e437111bc350fa81af87aba4bbcaf2ca9c5e1382b5a13eb6e45d6e5491c89101d08bacd8018a1e93fe25fa4191efc65dc3f13f29f1dfe63a0b717be77d981e8a42a1d3a4d644c2cf0f358ccba9916e60d569b92e509b6366be81abef16d678ff7ceedfcfd0110ccf48ec6b3973896f085e14c44e5bde09791e58735efad88bf958762eb58d5c7b4b92bfb5d927c1d9"}, {&(0x7f0000000e00)="72c33cf3d27a9ca157adbe7206c82eb5267d3146075cc622333ecf4f54d388ff9aa8f7b7bcff010000d53172ce66fc45f12c044ac29886448077ac0da324097b3ead5fbd8e4ef3004e9d2cba254f11a01c1c6eb0a8d551f4790955496631ad118aa62491870f454c6d120abb797c7801e374b7a2ddfa0891a2c2f028fcb6b266b665387bb386cc51a525b88bab01"}, {&(0x7f0000000bc0)="1a258f56ce9f29441e9b531d9d866bd242a0e4d4a7923495ec793b53d2a680f0416f9504914464ff487868c446e3d749114a34c511a809929102859695f2a86b7e175537a68e4b00e7bc1037addc60c1d3d5c094fc64df0ac57fe23c3f561bed"}, {&(0x7f0000000c40)="40728cf288c846a3091587aaf5930f9d687db42cc1b98c8529e9d9179f5b94ee67219578ad08141ec06d8f8ca5773a423f49195b0056e48acaa53c4bf62d0b29801b423f9c2b31009586f91685a21c8529b2efb2b21f2455e700d9ced9b4729145fcfbe27b9f06f68809ad497683e2e4f9cbbd04dff4"}], 0x6de, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1015.280136] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.285281] protocol 88fb is buggy, dev hsr_slave_1 04:52:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000ce3000008000b00736b7000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={r9, r10+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x101080, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:07 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x12001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r8, &(0x7f0000000040)=""/11, 0xb) r9 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r9, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$alg(0x26, 0x5, 0x0) getgid() mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 04:52:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:07 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r11, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="c4c27d19545da6260f09b9b50200000f32660f57950000000066baa00066ed6536660f6f5500b9e4090000b860cf6f4fba4286ad040f30c4e3490ce3050f017905660f6f38", 0x45}], 0x1, 0xa, &(0x7f0000000240)=[@dstype0={0x6, 0x1}, @cstype0={0x4, 0x6}], 0x2) 04:52:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r6, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\x00\x00\x02\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) r7 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r6, 0x0, 0x70bd28, 0x25dfdbff}, 0xfffffffffffffffa}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r12, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\x00\x00\x02\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000325bd7000fbdbdf25080000002400020008000b00000000000800040001f8ffff080008000600000008000e004e230000cbc7926671e46e8aab2b8255bb43c17d5f5dfb68aad47235ac2cf1b0e6760a3adfa190531f6e12204e8bd057bfcfae687a5fd0911d2371364f855935339195aad0778de64d762c5c0b7381bec11446bd0a189183ed349182690d627f7ba775ddface26a1ccf88e7c21d9109483e0ad0f2cbc49bd758010c07026540ef1fd7c05eeae11637334001306b279ab91f23b74ad655e87885c5e3bdd321e765d9255429df90f5bcd585c7e91f21fc6e4e2e4857f070c05c427dea62b"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x5, 0x5, 0x1, 0x3, 0x0, 0x40}, 0x9, 0x3, 0x8001}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r13, 0x4c06, 0xffffffffffffffff) sched_setattr(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffe34, 0x1, 0xd6434d6c41cae62a, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x84, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x8, 0x4a}}, @IPVS_SVC_ATTR_FWMARK]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_STATE, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0xffffffffffffff80, 0x5, @rand_addr=0xe126}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="292d5bd55c4d75c97881edbc9c72c28e"}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\b\x00\x00\x00\x04\x1e\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x84}}, 0x44004839) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x16) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="d9ea2c5b55d8c647fe7277ce8ec89ae1d44aebbdda6467c50c232de8a4", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r9, 0x20}, &(0x7f00000001c0)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38009aae77332225f0a0fe7d41305e4f55e4ba1304d921005e7af3c47602ddbb032b4a5c1fc3cdb34b27e7e0de5d7d270a1968c654594eef28153b5ed44aafc044da75d8720a6ea050b25a06ee15be5356ec0872fe9f229aec99a2535876ce9eca40afb03c36c831e7b5d991a26efd9de15cd7c0aaa22e226203a354d79e1a48429bdeee22ad2795ceec690ff2a83d18a9567bf6bf27f666912c000000000000009b00225c8c4bf6d9dd86eb2a1759010000000d920fe10f2e91e732d45603926bc75e00"/220, @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x10000000000003c3, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x5eb, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000500)="8eb8eb2933e29257ca81d9ea7a856526d4c0be3751f3732e2d8c812a2a07f76eae4293f05ff8416bd75a4ce17dc3c3a681b4893688e28c04ae26b225f5901cc5e0bf8b79d4e15a16ee53b12b63ed1692d0b3408cd9f67e1984b070a082849bab077c5b5dc65a9095f7e25f46abf22f5ce79e84c3eb8e0b54e0e7e77bcd9fbd413730ba32233fe178bc4a134ff9ee2a7503bc38e940af243737ddfe2593c52930335862eabccf842819fddbdfa9638475f6f0e96936b634db0b7aa9b61d6d", 0xbe, 0x9}, {&(0x7f00000005c0)="d9e001ab6010eb35b58c15c72368feccae81a9b661da9f689c43cadd58384da1d087fac96f4aa920160272e7fbf4bf0c8c31e5594b70a8107004d0b893b2c21ec18f3275b04f4b084a536487e523300b48638eb9d82081d7e558d1997e475b808b8469585ae85786777cc0e7302f4f8cd1bbd0bc9e30a026c63b7dc7a1298e6f080281b9cabfea78e29751e85b94779ca59b68bc6f762a10f441439ba79edce9eb009fe13c477fb4", 0xa8, 0x1ac}], 0x80, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0xffffffffffffff38, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bb1d30652695166977dadf854ab572ba87f97c4b792ead1dd7f01eaeff862777706bc8caafa542e0dee3b84ec1539dadd58bd06fde0a435d34d5eaacf07e80f5ccb9fe4425f88ce173b956a9a5354523c6a590377a770c051d1c37477be5510108c00f16", @ANYRES16=0x0, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x3c084067f06fb8e2}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000680)=""/224) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:09 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1018.741225] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000080)="a59fccdd897fc58e7d04784b6c378aca922aa9798451a1879cab032c", 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1019.440166] net_ratelimit: 14 callbacks suppressed [ 1019.440172] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.450314] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.506015] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) [ 1019.520123] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.525301] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.530498] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.535578] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.540744] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.545864] protocol 88fb is buggy, dev hsr_slave_1 04:52:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000aee809c0726e9ba02509d384c7592ffd65e9955af1af751b15035adef0d05d1a2d2c63677186abc782307eba4621951a3cb64cad99442ea200000000010000007bc08655c250b8ef285f89aebf8e357c0d098cb632894e99ca183dc0517c5bb9b465a282133da5050931eae6fce53eccf6a7a2166e98000e64bdb972b7d70529cc26e5b9a79c82fcd2e523599a2d2c40ff75c723d95f08581eba68956eb3e800"/175, @ANYRESOCT=r5, @ANYBLOB="000028bd7000ffdbdf2505000800060000000000080006000000000008000500000000000000a50500"/50], 0x3}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f0000000100)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0x200) 04:52:10 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:11 executing program 1: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'netpci0\x00', 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r10, &(0x7f0000000400)={0x30, 0x3, 0x0, 0x0, 0x1, 0x200, 0x7}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)="1d9b6d85399ee34000b021c67ac88c2cbfa3914fe069916e4dfe6dfdd7764a5dabc636142a8e4de417be2360ac8d273c472a58b4b4355c59a980a65ed1d1fd556a764d2e1cbb47842dd865d6a1", 0x4d}, {&(0x7f0000000100)="1fc5fce69d15c5920c12a3706deb55820776003700eacbb5c18990db6f032691cc76ef5ba0f2cb27da0f48a5f11c49da", 0x30}, {&(0x7f0000000240)="5fef", 0x2}], 0x3, 0x0) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0xfffffce6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x3, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x8000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000062220bf29589716f115a2c2ac09db34a", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008ffe900736970002c00030014000200626f6e6430000000000000000000000014000600536ae2d4ff2983e484b400000000000000000000000000000000080006000000"], 0x5c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) r7 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x5fff) shmctl$SHM_LOCK(r7, 0xb) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, &(0x7f0000000100)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xeb45}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000080)={0x2, 0x3}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1021.520157] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.520253] protocol 88fb is buggy, dev hsr_slave_1 04:52:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000079a0d4e3f4134afbfdf1312f0ad1fbfd28bd7000ffdbdf050000000c000000086bbe06000000000008000500000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600003de64f9b358b7bee000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000500)="cff598343816e0502f06cd2c3ec556448748ae5736668610afbc3d634d81116dddc0a64a31d103d6ed75f85f3e2d61b0a85325204abb125fa218aa2804f1eb1e00b286c0cbc6ee855e8456df25c691f9bea83a7d9354bc1395b76bbb8377f672a19449b6d08230b15886ca046c7dcce671ce8803244c20f0a79b377b0211be0159771782413ec17820f01b8cf88d4148445ee2b627e9959477f9b441c643a8652638e57546e4e910ecca62430a03cb4980da50eb10", 0xb5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r8 = epoll_create1(0x7fcda9252a4c684) epoll_pwait(r8, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000100)={0x9}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:14 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x3}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0xf0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) read(r1, &(0x7f0000000080)=""/8, 0x4e) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x24) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0xffffffffffffff37, 0x2, 0x0, 0x0, 0x1000, 0x1000000000000000}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x367, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd24, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:15 executing program 4: socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 04:52:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x401) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd709f00dbdf25050000000c0f010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = accept$alg(r3, 0x0, 0x0) fcntl$dupfd(r9, 0x80c, r3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="fc4538e147d184d237d1051bf7828ba3aa402610c40367db6801db64302011cad4f8eddc6f3a8d2d1db2be3dbcc178d7bc6fc1e18140957b68058de865515aafa0ce54c6cc502c7360e16203f45e5193ad20694ba2aa7eef4aae0c3fef2345987f002ccb1f57", 0x66}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r0, r1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 4: socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000100)={0x8, 'bcsf0\x00', {'veth0\x00'}, 0xc0}) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2e9594157f77972b188fbbe57c69660aef7a8968dfa66d060a16fd32e623670d28f337c6bc084399e50284f95c7cd5055a64f8c84d06000000ef7c87b847f56929ee00001e3bf6ace9bb192e98c3622561d26369bbedf7fcb6458cde76c65cf5110b9fa50f086cd90071f5939ca368", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000080)={r11}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1025.680160] net_ratelimit: 14 callbacks suppressed [ 1025.680167] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.690318] protocol 88fb is buggy, dev hsr_slave_1 04:52:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000bcda20b587d9f4266b77381b78de1ada6c0126700bccb409ad6741114e50818757bc221776cb764d95c8df17cec89a86fc2765209d9705ce157a8dfbd274e0130f4d5e93060bd5291cbac735d74e5252586bc67fdf4d8e9d15467d414d36b021a045c61b950c2e07acd49efbb49a24f6dbbe854f53bfb0cd6d22c1ed03282b8063a1d221380362a77bca0d9975c0af9524b8ccc22e203b57adf1ea522feea87bf8efad6366a9ac093adb1bf579abe020288148dfb68b659076d6", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) [ 1025.760116] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.765313] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.770503] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.775583] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.780746] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.785826] protocol 88fb is buggy, dev hsr_slave_1 04:52:16 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:16 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:17 executing program 4: socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:17 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x100, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0xb, 0x2, 0x0, 0x0, 0x2005, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3a00fbfd", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006be0000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x600000, 0x0) write$FUSE_LK(r9, &(0x7f0000000100)={0x28, 0x0, 0x8, {{0x10000, 0x2, 0x0, 0xffffffffffffffff}}}, 0x28) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f00000001c0), 0x1000000000000086, 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:52:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:52:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KDADDIO(r9, 0x4b34, 0x688c) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3, 0x6, 0x400, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:52:17 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38001000e7292df2d3b4017d2d00090508415139f07619afe392d92d2e9c808e4d8b34b6944081e0b8241becc2b3e1c28e694d", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x3}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$TIOCSCTTY(r9, 0x540e, 0xdc) 04:52:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:18 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1027.760130] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.765341] protocol 88fb is buggy, dev hsr_slave_1 04:52:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x2664c09cd1197013, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r6, &(0x7f0000000040)=""/11, 0xb) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00|', @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:20 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fb476a9184417ce589cd6a6f88b24cf438412803009775f531631d1d1111c81d0c98b39fd866e92c21432de6c3f8c3c6d8a875d1c4eed74dd9e81b259bc801029a40d27aaa998f669c9d47d06d88b464e5a6aa3535b9d6b5a9d4ff7b2b587baeb76c7f294960040bdf45fc9fe68cdf3564c5123060a79477532017cfb395d9d9dedd913f46c3593103d7fed1067b72a8834210e141c96039b20c413bc28a9f33357a2b11eede3d716f9b202c999e6ad884831e9c4dd5e8c5c4d8a16fffd259da7dbf4d91652584221a2ceab7bae65d3dddadf718c849cd2ced941731dad95a86cee4511ee521575573ce86aba0ea4a7b4743", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000240)=0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 04:52:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r7, &(0x7f0000000080)={0x30, 0x0, 0x2, 0x1000, 0x0, 0x7, 0x0, 0x2}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:22 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:22 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 1031.920147] net_ratelimit: 14 callbacks suppressed [ 1031.920153] protocol 88fb is buggy, dev hsr_slave_0 [ 1031.930351] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.000161] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.005272] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.010384] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.015411] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.020482] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.025503] protocol 88fb is buggy, dev hsr_slave_1 04:52:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:52:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000100)="f66d78b0fc191d40abbdfd4cf4b3b4aa3508c2d9774217366ed40db3f0338c4d1681c2ae", &(0x7f0000000300)=""/118}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc8f7aa59c5242fb73d082d774f1f9909953698e3894031012eeaa64aa95f6fd543ce266110c5c6546ba0e68f44a4e2a5d0ee418c0793d9322ec4fe606ee508052dcdbb019c716ee29e289561709fd66ded827d9a248f55e828a83bd790c48f68933ab1db4a642672345c4f5d4ced43ab58aa9c7b407f4b4e592049fec13a34384f4e19be279ab9f58bc6b54857c284eb6137387fb4a866cd59841104631b5487fa277f6aaefe0664131bdeb70ab2818ba2f64ce6a2f2df84a19e48dd3e4f04b8a89080a7c8f03", @ANYRES16=r6, @ANYBLOB="000013bd000b00b7f678500008006442000800050000007cd6d89a000000000000000000"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, &(0x7f0000000240)={0x77359400}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:52:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f00000004c0)={0xfeb, 0x97bf, 0x1ff, 'queue1\x00', 0xfffff801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc6ba603", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b00736970010800060000000000080006000000000008000500000000001230c90ac7a11f20271fa3e383606be52d0c26d9333ba22da170f7468f7b9cfea42ba5511401fad005c071528ff1ca0dc24df6254abdff3e3e73e423dce3d4da9a97df9d0bf1acf5a6d524ba55898656bd949acab7f6ac8e0aab8582774ae42b77165e3ada7c8ac11c4722e21e118bd5de64fbcf2b2ecdd8fc1e252272c0fbc1aab8c3f87a4852a43b07b88870af2d77ab"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r8 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r9 = accept4$rose(r8, &(0x7f0000000080)=@full={0xb, @remote, @default, 0x0, [@rose, @default, @netrom, @remote, @null]}, &(0x7f0000000100)=0x40, 0x80800) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x1, [], "b75fcd640ae52d0743af08e9839268e7"}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:52:24 executing program 0: 04:52:24 executing program 0: 04:52:25 executing program 0: 04:52:25 executing program 0: [ 1034.000201] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.005360] protocol 88fb is buggy, dev hsr_slave_1 04:52:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) chown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x38, r5, 0x0, 0x70bd2d, 0x25dfdc00}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000d40)=[{&(0x7f0000000700)="0c6374d835cd71f85c98c6d811ee4bb2a22f74ab11f0ca391227811ed2fa0a040a6a179721a5499c29bb74e86145e6b4f03a7c01520072a38675da118aaca2fe2db09c327f0718a687a8baa7a4c9255cdae16783183d8c1ffd206adcfd401d077599f39b45035b716e6089de740f2a8d46b23fe5569102eb3ac8322e17bce11a911d7655570c25cdd1b44c0b92d8db9ff03b414947502021d00da16479acd8ca98c7a16baa7a365cd730dec064fc54407b31afd5ba7c030d9ac279356928af347e7c52b2434aaf475b8a6003ae0f4749369cd47fcb5dcd87a6135a5160cf93aba5c2"}, {&(0x7f0000000800)="87b47bb746c8873e5dab0f76e6d006ad1c096121d904bc541d4c0753b31f2a94a749a9a04d8b2de9e49af927d9b98209b069ca24da1f6f68b230628f0adb5a927432db01522e78f561a45d4ebd650612012b4bc52808060b773a6dac357f2a7a98186b25ef0d61e6629df2f06cf821091faf25da038dec76ed1a7204471edb8476277af79e4150ea9843203509c7e65e3528264e6d7cc62a22cd98babff71bcbfeed60625a50b887faafa134bb03b1bdfb6c1e144b93841cff598daee63fcfa5a39b9151fb60738dafa4dcef7d3b4f26ebbf6c8ce36454df630169c7dcdc9d78d1d6e1cc0b080fbbcf115132fc18f49bbf6a252e81a0417db8180000"}, {&(0x7f00000003c0)="bf9b6ac59f1a55532fa145af58c7"}, {&(0x7f0000000900)="5675e2ea6b9c3b9d30666eab925b2c6195138d0bf596f2836bbf5fe3bf3176f3af844cb4db437af9f18cdecd4b026b8dc3fe1c409b44b8f4479194e5a902670899f471c959285fd59f2d545dcf66acde1138fe5571a7527cadae82b0b67d2f33b3a71a2120fc3a4cc007fc70d6be986a63e8c990e7e2309d718da6bd6122fe0b3d3e59465ca2482285fba9ab6882bae86ad133825b46966e0d025eb7432c74ce0b5d456df5dd899a0260870154ba79b7"}, {&(0x7f00000009c0)="ab6c64a03544712574eba017961acde3603982a1dcaf5971f96729f5a83860ec9cd84601f28ee12516404e1e6edf89b29a090fe3c8ea2a4dec87a68a083ec26c74b631"}, {&(0x7f0000000a40)="e16df35973615ee0bc3ad2407fcf00086bde76fa33441de6b24d13c82c0037f270e1a05b6816a964a3ae50852b001a339f3edc357174c0a2f6dfd614dff189403ac27ba1cacec85a4aa52f9aeca58887f336572b70feeebc15abb8911111d15b3eb593bb7a7523c4e23fac717b087455b26bd7cd038583e6d2d2ae"}, {&(0x7f0000000ac0)="db994b35e65570b8c0431d6bd24151ac557890fc0e6f91848e161898ecba8f7e4a74b3749e0c0cdf08a6cfd7468486925b9715096a2e7e992103f2ac6924b2fc4dcb1b897a39d25e9c6106131cde38a967d661fd987bf0a95b92aa492ab1ff474ad1016d4f600ba850380de7d92dd6a57e99f76f45223ae3d4e73747bec441732a702350d5a40e658af3b2010f45208be076db1021fb68cb6b2600"/166}, {&(0x7f0000000b80)="9b2202b5a0ab90551755714a673845b421367a8f1c903310d602b08f0f3289695b62610504957f3307f952ec95af8a693220ea"}, {&(0x7f0000000bc0)="1c46cd374bfef1ce2154649fff1754ccaf4137c9ea47efe7db0b3652ed344264fe7334b5952a0943f635073387aef243639767781880e8c0fe7cbf5f5d0717fa45f4e70d75a511d69a1d8388e1f1141a641d77c9104305b9ebf041a52449edd7033f0a19c6bfe85eb14dc91daca9bc405a09b78581982dfc5c1052ee42e430fbb9fb08df8fbfbe6011505b377e050a1f838294249c11dd4d93b3fce582a291686f7a52bfc2eb7caddcf33672439b5b239172a6aa3c378e60ef019908ecdf8e10589446ca82512b0b481bdd2880c56317b8bf7a6c6246951b47489487bedafba19e1f363d6cb19986a6243dd4d184"}, {&(0x7f0000000cc0)="1d3a23ef3835993ac82bc8d61837c5effa1574edac60f70e6a256df32a3f55ee24b2acad453236ec0706b2b3c7435504a1b2196946b0059040afe5a3725f437e31137292cb9b7e04982ce7099c8de4cda4d22af3ba4bb68959"}], 0x1155, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:25 executing program 0: 04:52:25 executing program 0: 04:52:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x0, 0x4, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbef25050012fe0c00010008000b0077697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f0000000100)) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0xff, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:25 executing program 0: 04:52:25 executing program 0: 04:52:25 executing program 0: 04:52:25 executing program 0: 04:52:25 executing program 0: 04:52:26 executing program 0: 04:52:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='\x10\x02\x00', 0x2801, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000300)='.\x00', 0x4040, 0x20) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r4, &(0x7f0000000180)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7570706d727169723d050066696c65302c6c6e776572640000003d2e2ff83609c3a91ebd563a66696c6531df7ebe3249aaa5d21a826818a0293bca14b39656b7fb188b9266a467e4583e2826548690572660b033b024c800"/102]) chdir(&(0x7f0000000180)='./file0\x00') lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='se\xd3\xc6\x96\x10\x00\x00\x00\x00ACK6M\x16dM-SMUTE\x00', 0x0, 0x335, 0x2) sched_setattr(r0, &(0x7f0000000000)={0x12, 0x2, 0x1, 0x0, 0x5}, 0xc4c00cd80ae30bf7) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r7, &(0x7f0000000040)=""/11, 0xb) r8 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="340069d45019c8cc6f2b7c6015b200000037bfdfa45ecf15d2", @ANYRES16=r8, @ANYBLOB="020028bd7000dfdbdf25050000000800050006000000080006000000d38807646280b5b200000800040002000000ed6822399db4ee4442c609f4dd8094199775930a0829ee7e9262018f52e2e77c97570fb8612388845b45f42df077849e5b8754ae9bac8e95290d8d0aae38e93367c9fb84eee1b88a7f120513d6d59925051babd42e1e4143e837af5780a4d55e9580a05d84f1667f53ee3b8be8f472df"], 0x34}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r9, 0x0, 0x0) fcntl$setpipe(r6, 0x407, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) write(r10, &(0x7f00000005c0)="edfc33a4e2cc739f97f0a9d77462fbc16f8b6538a52c290443c66f98ffb89a48203706f7d37494359bf6d389fd30ecc0d7440d51f957254a4b657f3a2eb59e0afd99377f652dcdeabf7c601da155716af84c721273510b28b8aadc5b43865b054fdc2c6406ec812fd36357671bfd596dd45eab5b19af4dfea92d3f93f8a5ab7209b5b7b63d01d78259704232fa9547cd66078355ed4d96567ccbcb89fc12529541e730fde6638c93d34a8a0eb787b69947f2f983fe1217b9905f918195eb3f8d4a857834fdc32b937c52e7e2d40ab4eaa995cf5968720bd3ff85979c206b3b09002ef04ef7b239f152345b28d994232eb327a4d5e44bc84d36b4ea", 0xfb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) 04:52:26 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 1035.185037] overlayfs: unrecognized mount option "uppmrqir=" or missing value 04:52:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20008, 0xfc}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:52:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1036.006583] overlayfs: unrecognized mount option "uppmrqir=" or missing value 04:52:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1b4, 0xa1aa}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000440)) 04:52:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = accept$nfc_llcp(r1, &(0x7f0000000300), &(0x7f0000000080)=0x60) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r3) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r7, &(0x7f0000000040)=""/11, 0xb) r8 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r9, 0x0, 0x0) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xdd) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d216c73c3f79763833001100000000000000", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b00736970000800060000000000080006000000000008000500000000007c4e7eac95117b8e87aa02b408211d79be8acf914ec5a57840a31b660a6520323b6fe9164a63ed15a990b5f7f3a72814204f9cd59a2d08980815768fcd9a8258984c7794300008000039184fa888b8c1de754bfb8be7d3d87c21072ce7b588d071931eaf17d121c8dfb0787b090d"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000240)={0x1, 0x100e, 0x7, 0x20}, &(0x7f0000000300)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x1000}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r9, r3, 0x0, 0xfdf8, &(0x7f0000000080)='s\xbfp\x00', r10}, 0x30) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:52:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r4, 0x0, r8, 0x0, 0x4ffe2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000028bd7000ffdbd725050000000c00010008000b00736925fa080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r10, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:52:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES16=r5, @ANYBLOB="00dbdf25050000000c00010008000b00736970000800060000000000080006000000000008000500"/50], 0x3}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r14, &(0x7f0000000100)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r17}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', r17}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x88, 0x11, 0x40d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11}, [@IFLA_GROUP={0x8, 0x1b, 0x7f}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_PROMISCUITY={0x8}, @IFLA_LINKMODE={0x8, 0x11, 0x40}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0xfffffeed}]}}}, @IFLA_PORT_SELF={0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r12}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xed2c}]}, 0x88}}, 0x0) fsync(r7) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r19, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r19, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r18+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 1038.156513] selinux_nlmsg_perm: 69 callbacks suppressed [ 1038.156524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.162137] net_ratelimit: 14 callbacks suppressed [ 1038.162143] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.162201] protocol 88fb is buggy, dev hsr_slave_1 04:52:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1038.208614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.250183] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.250942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.255318] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.272467] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.277554] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.282775] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.287882] protocol 88fb is buggy, dev hsr_slave_1 04:52:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1038.371914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.428205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.507052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 04:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) syz_genetlink_get_family_id$ipvs(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r6, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\x00\x00\x02\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xa0, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde8a}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x3116a578e9fef1e5}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0xa0}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1038.902176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.952315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 [ 1038.979595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 04:52:30 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r4, 0x0, r8, 0x0, 0x4ffe2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000028bd7000ffdbd725050000000c00010008000b00736925fa080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r10, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1038.992460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2121 comm=syz-executor.0 04:52:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:31 executing program 1: socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800800063ae6a081beec43bb5c9ce49373f17de2e7066eddc0707db9fbee489094d9d167e3861c6ccf3cc1d6f11bf0200fe7d2279412559a0e10252da48316c160b15", @ANYRES16=r4, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b00736970000800060000000040080006000000000008000500000000006706d29f9d1bc137716fc3d8889e8242bd1c6bfe34bda2a6a3dda22d25ad2c7121f84acada7007c2221518a48cfcc219efecf642dc03980fa07c06d7aa41a76f7dc5ba9f6d4a40f6a78c92a13d8a8d44a1b48a59868a923c71cad3a79709e2b811cfa46f32002065dc70f797ee"], 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self\x00', 0x2000, 0x0) vmsplice(r8, &(0x7f0000000000), 0x21f, 0x9) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x4b281, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000100)={0x353}, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x31e4, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="d03d78fe1d8b8fb4faa7ec67cd089e4b6bb6eea239aa015a12c9d181c42ef15ed4e94e82b61e35cf1e82e5ffb77e1bfcc09f26d068", 0x35}, {&(0x7f0000000300)="b3c909240cdab0bd25223cdcb898dfdc45bc4d30e041a4ce9294", 0x1a}, {&(0x7f00000005c0)="548b14daa22a496199a0d7a992f0fc7485f2fbd49ce1cbe80b8546d40c1f17be4f38dd624ae970fcaddef9b493d343754b72128b0a3bfc0ee598b4938bef2d2ef65d6bdf49c69eb957af0359768dab06689f8d22a7c1102fd915a7f6e54af4595598741ef36779d2abab06e604ac7687dda0d77d398076730297b7119f407d7a735c6e10eaba4b825159fab7702a7bb671b1b65b1b", 0x95}, {&(0x7f0000000680)="e4781fca42d1e6983d4a9c6aa39a1e3845c0d8364995517f91d2c10998bd0afadcf762457f73d3dc05a30c7b9e52c5d4815bbadd159645d16fcacf7a4bcdebe0bea3f2a7e649f2b019cd9fd73970a93a6c47e945f7df3eae97e58ffe3dd357c22358e91eebef2fa8d508f09b48bd4bae02bae6f3eb35b6dee72ed34647b9355eddb215c5647522ce4644c33b732cd6304f94268b9e3495d65dad940b0d49fe6e873cba1a54a1d72031fe49ec62d3de72806fed17b609684044de9324cdad434559149993cb44125395ae1dfd88959e1837b49338f3ff897628f48322bb27bd7b6a08120db9a44a924914124641120815f64555d47d9d743a1c1a004bb317e0f9afc27af2023b05ebbd33d4cc73bf627911fd680bc184adea304dea18717b4460dfb53d9df1e9039bbf887a4d9c3afb9588209817cfd8fa5d6f4115d74f46e9cfb6396d898185c845f2d5a73f71e2bb39ee85b6292da01112a6d5926d599aba0b51e3c0eb9c1730120b01e3cb074e92748058292797ea0dba388a029888b08b544c4e269ce28e6e60df42409d17c87d64503c86fe14e62b40031663462072e3554c4b54c6b16f9ddca777605e143256d91e4462dc5730596fff0d44053992b41f164e0282eb939fbccc58b8364e170edce531bd2c84c8b997469083b9df537ea99e7d899f570abed8af0657ce0b2c236b5a64bda6e1fc1995055ba01d823d21eeadaad8e0c4abcb6a9788f94a1251d037a8b21bf080ad416d8b4b567c8d84ef3b8eb9f44e55b5dd0382a56bde80ea4df00be69c42496870e03c9605b3ce12aefd2d403238574d526dbadd52ff919ac83a28b1f1deb3fc3b3af7a930c215ee319fb10e50f8fa14384f5c4240350877d2ffcb2a1a0981ed97c2e4cc0a7b8911496e6be29ea89a6bc6125e4506a1ea4d840cb0072c3c322760de2aafbc8c6a02a83c0742e36d470797450da3ee9cb6caad509c36914ba5f01e35c136769e316bf4793108634dcb86d92f78f0a98dc38541b6dafc42edb7a17187eba09f00ef8376eb8efbf721a1a696ffdc0acbf7e6b684cd3dc40927d4ece11b85431164180a9aaba8147f1248b81d4b934e4802f060b0a15e9ac18fea2ceb10482bacc7f755972a4b4246e6359201d61ca848de112b9c26ef21f1e74ddf2c06f806c727063d65b8f91ef355e694fabaf54edd46c6d727a4438215b0d5cb876f87bb280517719477fca2a4f319b8e8f96ecc75a4827868439d1a19117ca8fe699c475bb1b04dd7b2b509c70cf28589574a5e1aa6b584a6d28f04f96e8194c83554741c55e8d41d3a461d90adc2fb6d52b3d2ef2e6e263c97c1bd6c110d59193d1b9f11473770d6fe345d212d63d5022936a4027dedc3e074d15b2ffa38d94111ba7b89313d4ed98e050099257c260251c92c3db6c86ce7c72715f90b07cde79a163f50ec69c90bd019928aba9771c88993e6a126976ee3b9f00af1d643a2281c58d8548295a47fc7f0601dad2289e9b8680161fbdf05327d5c086ecaafee2a47679f62283290d53ba478c149f10cb7db0d4fd5d2532aa9c01cb6c5d55200290016956c5f84e7c5d44f1b62d95ba1351ff881053b57e8a83c2a189324a15b267344c448032871b3f6fd91686fc65aab810e0826db9cfe3de398514b11746366c5ee4f12e9b86381d312c13c51bbd4028313a673adf0b10f46ec37fb44aafd3564fbe494041da0c6eea511b6662546a9767f5cd519be0970a2294e67a31bfb97e6f6411f8b8f37314b577004c965feeba056c01c737fc15a8995313dcb4ddc042d0086b8a8b971a9ef090b8341129f13f53e04dc06b6161aa706aade2faab5a68ac00985d2928be715c15357bd5c1cd2a00d02651708d65b5ac4334ed44e9410d4580701507f56f1c078532a107046ee0751339648deb65e12ffada09536d3283c1e1eb4edddedd551d49bc90e8d6f4cbd4e5e975cbf3488246f11ab4d0546b17e4aa449fc90ef13f47e70ffc8b7a232421c8da35a2ec598a317ef79b64ef261a487d52f2c1901b636028ca732a56f1e5b14cb96d8c0e008c5552771111c4343893e3cac8b1f84280ce9902b15fd93f7a4317188177d85e46408bf22330f24b046bedb0e856796bc26abf05b5a28a452e14511e8d50f3609c05051de855e2e344014731605489cfca0a726dfffc6ba2fb8fff0b526cff5086aac751d909b2cdc2e944f4b14778d154e0527d84105addedd2fc28772967200b970f04d90969e2e8c1b9633a265e164605a5d58cafa50e6da0096becabd671d19d6725f32dd58e10447a11f0012e98677a58a683806ff5cbb23c0454b5bc1a7c55bc5710cb0b58ba595a2e02d013ffb79848cbeced7eefe1a80aca02802c36c6ffced3aaeb6e2ea9ae17eb5d5ea04003c1cd8386bc206cd6ef35ca88256c3c2d2edc761f933ce6f34f0802a1bc086b457e1b800ccb351623c0b44770474c8c153247cb4cc7023063c697974b189307be1f5712fe98ebba5be4ee4b7aa83a4795478f701d0be8e69403157faa039910a1b828ca29a5960b248e6882007b658e3e8d8a36b8afcfc1f2b9c94f4d3c795e3ae7b63dc42d744a35c8a6a680a1ee82f3e9d6ccaf33d9d94d51f4f4e17a9c7be572974bab38e813e854d380ab364bf6bfa929729a6a7ff7de761b83f773b6656262559b372d1f04d1f0824a8d6172c918d2283ba13edad891cc5a892d7d742d66818b382ce29825699a7fabae8045d99c0acd3600d63e8c3572281fd207ef484e5c326fdabf4a4ea3bcd78c7938c481600e9bc6d6f3eea42ec8da84a86702b14966eb7d5ee687f8bbe9388ddea5049aa23688c06061364d0ade0544108f387bc40c323446c6ea36523ca0cd3a37721d393d16f277ddbef5f2d947e11d0ac3adb7be11f2aa640dce97e0cc730ba8141566043f49ebedd9de9f0849314408cdf64cc7803b8681df4a1509c25ab7159abfaeb6e9e96eb67878a613799f0cfa0da0fdb2ff8c7f3988f7ed9e607245d4db2880ea908fa18e1c3c153f8633d5350616013207196ef60d7b77dd717df0e6c44d1039c42ea4e9ead1fe26e533820632d7b96b5fac5bfc0cc8bb9df4d1b284ad8fc47596643186c580f7230db9d1fca68bdf41d059e5b5e49c3c3ede04bbb879b0e5a582258da03d5a931dded79d97d13bfbb8a51f4746e9aa666acd2f3a54717f1705cdfc485a4f424206174b5de2a4bc22fb0275bdef4127f5059817c44cb60f7b92dfed1fb4e583d47a27fe2bda7775def6b09daea83a95d538a3d0067936e0cc94342185d74af10dafe37e3f0403599381943c151103fd9f435fb9788094e3289482dcf298b24310aca11d635a2d58def5c9d8724a60c46d946ee4374741a2f87d330c9858102d0b031e0a85eef57ce0b9b4ba25378930ba8db196bf3ab334939b68bfb93ec80035311cceaa6a44ff24d677885c1934209aa4cd75d5609936c19037fee025c54a1aa082d64c4f0083026bc131ad29aabdd5caa3a8e01df3663508c46ab455adb31247c2d588721dec234b30b9429cb50f5b15686c490060fa0e23f4464e222f8b76b0e3faacbe81e800924deaeed08fb8dcb1b1b5db93bc30c6f021134bec6b86aa1d256a1fb384f46bae02aa9c6a039940ac069136e06be7847acd97918d5c696ebfbd4c37193a8047a80183180dd006ea462db213339ea5901c51f49d4b6e1edba4976038b0fc58ef5ac8d9a3eccf147fb169db44d5776695e5e841a63140639da5758bfefae509610a6fdd709616a80dc78619a299f46b811ff390a80f16284903cef59f7d20fffc23c6ff419888dd1a078bc3e44529e3b60ebfd64ec491da441433ca7fd31186e9b11cb738791db2e87b12c8ab1777917d92eb62cfc965cfed5c0e88dde633f4983c222360c1d1158083b5b3bc4cbf3e25e769e5a33d7eb3263048fa627bd81a655dc040424aeadb196b82968f4a3e566d97068f71b45186dbda7b83a2722f9b82974a06c9208897b57821e11299747a99edc3905ac9c496b72f739429181c67a0399a14ee7b37b2c43bdee790b898419605a459ed6750221cf1818ba4b7ffc1a092920fd3ee73631463bc6bacfec067fbbf37e89e9970938e97af85b5cc5b565d568396e9e0d7259c31858c0535dba19d953be5b4bb972447f135b52db5f387ed155c08b1bc0ca57b98bd4776345059847f00c987f3db9989bb14ff2e01adf8e98fe73220bf98ff7ea3086b01c18609f41cbda50f489618c5f685a8b7a094684b225d10aa490a205d9ef2bdc3811ac78000fbdb6228c20656ad52602e014be4049d7fc5fed75e0957f3a62e5b0bb299aa9d5cb0761794f58b9c31dee59fdd30b23ed8a3b92c6237418f835ba1a5e854a447020e6c76e39adf785dba533075a7b5daa7163d1fc91fbc1f9bbc948a022a8b947fd8370e06ae73b8268ba622a098e3d3f0932a7d102ce3ceb75d1f60f8b6b1c1b5ddec4f651d8039cddc1f31e32c15fe69d452a222c14f8528e67611a3dfc12aee1514365a35d5498dcc953fc62359af2853f384c2717a75b358e8bc6b83a43f19f9542fcad84a0308f5f8728d4fb45d58a4a657084b4ae39669d4956833eed1c18d73611336a4e43ef755e6cae71453fa2e4b25f0a3e04c003832ac0c25783ec2f52fb06143242c94923af48116fb56f03d63eb05ec0de26136b547f501f2c463ce9a90b1922d9bbe26017c82ac5ac744852983da7d70ae64ecf65d214ac3ad91986d1efc4f9340086141d5aa8090c67a62c03d9c742e953c1a07126e9b9f2fc04a43abc2ff5ff50a0e387ca467785be4c22311e9100a065eb5c5d4790e2ffa6372478bf3fc075f5269df4f0c7b4e0bd87efe64d72a95b21ae06593ac8d19d99eb49e1738d9e0b31951fe928944095b3fcc904bf92e71b4311e753d815c290df915bb43a6df72fbf16800d87e0c26363efde7c792df3c066ea5e4c8ea88fefc35e73e16ea96e2fa794c263febc58a6268ab7e4a96bf782a70343d3198687c4049aee9d25a489515f13dee2633f93ad43784a12c65ecebe1641ac69b4e1595fc1088314f848f9722e19f485340de81d9f6948e2380204525f6cfe7877676c9087c53ddcfac9063f6471c8d8ac56c7d10be4bd1674f59ee860dcbe26cad3a819ca1dc9b9243e31171055a1b42f673290ef5bf21a1b51ae306236509fb165f04d50c5ae9c81764bc4bd53445a3052b3d089e1c9ea9c3457b8aaaf40fb7a3a0b2400a34e5e20fb6a2e36c7e10eb3b6267b0ffcbc46736e4e98c7fbdec00bd04e8893376da96ea6cd6983fd74115c6753029912382db708a9e2a5910c9098f3fcddc042b3d4cd5131909e28dd7d7e4f08768c0988950d82a2c1bd0ff6dca1fbce068877ce1c8806c08f5e71573f354f217a4943d23bc43c4be586ee9ea49b9e82844cd9bb46bf4bfeff4d76c9d53daf262eea0b6ef499acf732d8cb624b0872fb053676a05a16a3514842d5cb6a27e8adab336b779ce638cec742e89c899b03d9b3005ee0c42ba6376831848c07373988181ca15c7a17e51d582b7baa20054e9379cdd805fd343d2a6a12c24d18c976116595a35deb43588132128cb9166fdd8d8de910b2b9af9568583ebecd9aa3844672cb2da7282562e5bdefd63808f86ca8227fb4377875686e9f38ab83a90683550cd5b5698b3a6f463255e05bbca23f66f939be8bf86d777d9e094285fd574dd3b965b029014777ac523fa48218464feda161d5ebfc23ac8ed457ddf81e71e1908203517c8dae6f2203a146c43054f8df010ba5f80da8bc6b0bfb07fb26855d01e6", 0x1000}, {&(0x7f0000001680)="3474b30c65e9acc2577dcd9fea8d5deddc9d07db9fc79a2e61086019218fed5b49c50d25f94b85a9e5f1afadb14522089c41708a2dda21ca00c82eb01d2c4b70a622fa644daadeed40e990994920a0b554c311574c", 0x55}, {&(0x7f0000000340), 0x2f2}], 0x6, 0x1) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1040.240156] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.245284] protocol 88fb is buggy, dev hsr_slave_1 04:52:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000000fbb85fb01abb7f78ebe9b0bfccdbfac565a944dde3a80b1136df5836549c84dbed40131013373fe6efefedff00"/74, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000100)=0xc) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r9, &(0x7f0000000040)=""/11, 0xb) r10 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r10, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r11, 0x0, 0x0) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r13, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r12+30000000}, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0x6}}}, &(0x7f0000000080)=0x84) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r15, &(0x7f0000000100)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r18}}, 0x20}}, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$packet(0x11, 0x3, 0x300) r21 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r20, &(0x7f0000000100)={0x11, 0x0, r22, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r23}}, 0x20}}, 0x0) r24 = fcntl$dupfd(r5, 0xc0a, r19) sendmmsg$sock(r11, &(0x7f0000002f00)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r14, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x0, 0x1, 0x0, 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="febf43439d5414675dc62f1caeb5cd01f93c62f59100528dbf571e3416a32a03b05baeb287e11cd6217510", 0x2b}, {&(0x7f0000000580)="676148043f06dc8e49028f524483719440041efce0fe17504b736aff258535095aa8df150d1f9b7807c708cc199d012be2fc7dab139969d4462ef0efeac850b84d178679c23dfab7e8c601369f8cf0645ca27c722fa60981d604b5279d914ecf16e364df45bccb4afc34d978ec43e559d906df33052eec83e0887884bcd2c9626c43cefa6fadca2480c7a69ca066017b373fbbc61f8bae9f04e338d7112d59eb2b1b0d6e23724e32b8d303037a77f79b7629161e0118fb28c32fe233e8eb4fb06b623d12f3cc4375aa41d2cb80f4b60600499d31d2773eff85922a2f846b57a8b2036cd429f751", 0xe7}, {&(0x7f0000000680)="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", 0x1000}], 0x3, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18}}], 0x78}}, {{&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e23, 0x5, @loopback, 0x6}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001780)="94afc8cc5b065a6d544b7ac6e6ecf0cfd50e188060fa2781eb7e248dd23f056e0ae616dea21e6cc11cbfc1929159210854aa13a78ae08e9efe355908c99942d3c6643eb4c111aa8ef80e80a9ee4ceb998590c36ae7d439b75e527c20d91817ea", 0x60}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x9ca4}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x30}}, {{&(0x7f0000001880)=@generic={0x20, "cb012661a2957cc7ddd3b065d01aeee33bbf783b549480894e022527c73e0f5861de1b27d5562f3355b1cfffcbeb1e8660e36dd40ce0840188777eafb55f70db1f277c019407edd25cfe290d9b4fe86d6fbdbc1045c3862f81b9f588ecafd7509ad7abf71ae07670fa504b90e309274e315c0d105f3ceecbee2a56dba579"}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001900)="722f12efeda1cd21dbc3415c218f9bd8fd1ced3d59eec330ab2cea657bde8dbf8dbecc57926773114c03c5ae905035a640bc4b491f4033806c06df167144e0758c5ba5a936893dd3928fc16d067f1ab153e15f4c375d32b92fd81a5ebb8c2ddeed080aff2e2031ecbe7f47a91f1e0039b8a31e20e5e33fda29769a9397609547ca749d96cd1cd7fdaa1318a2f72d32707beac87279adc6cb232cdb23a1247be3642c01cca034b7ef1fb2f59288a6715db7caf4fa837c96d8717017a1cf81b46ea7d052cf013d2d60c728bae380d7c7e048c6d49ff3e81931296e3c6e66e6d78f03f07835b4", 0xe5}, {&(0x7f0000001a00)="42992468fa56b7dcea390ba0227bb3922b2a09d845f981e196bb67f650f584e90527e9831a93a76ca011aade4c07c9f14f2182bba5d149952f1c3eb455bbcfca0008eafbb57be9034626833ebd6305f5aab3ab6753e161e8c4a0118d9b34e1f1b0370f463ad9bb46b4d291924707b96852d903cbce9b2fe27daee7baba8ca9ac8016c40a2e919b455e4e023181199e567990bf4c182a0417175bc28be202a3006cbbcfbc9bec0aa9ee55552b35cc52310574ac5a76bd9170253dfb720171bb47741279c7bc", 0xc5}, {&(0x7f0000001b00)="4e4c003a83ff863310f9ca0c7c7562c2f685c8e71e2e1ee0c1545b6db1dba7232cfad38271c77ae61f58a8c7ae81fe2882de429c7cc6987f02435c20aa25", 0x3e}, {&(0x7f0000001b40)="98700183b7ab3e8d80a87ccad971dfb141683ef5d34bb35d17499038296756ed7640697ec774339f6497c5a24210a801a7ff7c3a4b30d68d9e09f02a628d59daf3a36d350fb158b6afe03b968d27e01e269cf4380daf95d8b4dbf998afef7148018edd7bc68abd972a49362335bf2e76c7c27f341528952c9436245a69742dfe6beb40a97dbc54d86a7b40e9bb5029042ba69599f42beb593f3e4f9c4dd044d463a4e1cb16820f064cd141007b61970494ff8bb4739fe4c0c6e1b3da916fe451858a33d0332bea208e703454ea05a247584b2e5bb5eb44b357a3ea2a7dae1a6615a6aecb", 0xe4}, {&(0x7f0000001c40)="575ce8f2ce47227298ca90a09e48c425f937fb9ff4e0f279124a51bb494291bcabdd67fe452509c43fe66411353ba6cbf0821330233b3628aaa63bebbb8cacbc2375b81811ed98", 0x47}, {&(0x7f0000001cc0)="4541a6ac273c5c5947189c6922586ed546f264547c5945ca0d6fd602f19149532857f34cd5f3f1db18db924d69121929c7be70ec9fdbc0e28c20f31a90852daf", 0x40}, {&(0x7f0000001d00)="ffb08fe480ad64c9cba25f3f20a60f86fd0778b6af4fdbf6a3ffa44a3d2041fc7848bc5dc36631bcd2be964f886963f99ee9d59f05a69131fd3695e4e5f14015ad07334615930b1bbcc2166a962747926edcf2bdc392b04f0a73ec92383f44bf79e0ac01e5999fc5ef3064f1498acc48fa0c65d473a3bb142f94c67529a189b06e5d7502271883ded8f011c8edf5c66df079c999a692725d865018b70ebd522d058a06ce24a42425fa6457104020e810bb6eb6c4bb8e8fa685fe2dae738d5a1ad96d6d117ee269f4b910c508fac2b709219246", 0xd3}], 0x7, &(0x7f0000001e80)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0xffe2}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}, {{&(0x7f0000001f00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)="7c454fa6d974a3063e9ce15bb7d49416bf9f793d84fdda97edaa5551add0ff6c3efefcbee3b2dcbdeb7ca170a934c2897aff3f41206e7e9673c26c07a06b9f5e904bb740daeb38de2d155b5cbb030886f3e8ed19c33772587e78e8c17bceb8167c25825a1518348f97df23c173e565a412c23f09e573682a1a0b6d9f337e64c2d36919ff4070f4a6c778aa390dd53a907b596d03cc6ba19d41418d8659f0aa953f58f90e2b9dabb05b6f7c9efc00220e67a6b90d54a06543552159b72321c4c9f971b0b0172ca88f999b61ffcd468c7e90a416d68c14a5ef876cbb0549b97f5c05a02fdd9efa55bc8fcb8ae7b6697be487ca7b1e", 0xf4}], 0x1, &(0x7f00000020c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0x90}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002180)="5e242f767c2f16462dc0459da126a1c1da841a914a28f6cc06", 0x19}, {&(0x7f00000021c0)="8e0f84f4a5169bf35ad1a59c2d8e52956cb8304f1f0bf41583e2392a58843d9b596333b9b8d6cfde91196782af78bf74600a382b7c7dade15519ab68bcf9fad9c2aa49856b4ba4f43c3f7a584e1b5b211aa767c57956de84d5c156da8acd0e0b1815ff93fe222ba97776b9fedadc8500076605f18f2ede1ee83e908ff53a28b776aa62d495b122bae8a21b168ee4ded2c8159924ebe27d4f89a129f496855f08527997e0321102029c26a4ccb3adda9ac1905087a30129c62a41f50a95dd77dc46566d2d36731770011d18db4b4fe989feb6ac8a415414163ec3a7719381f8b9e1b6141995cb312e7d4b6e6994", 0xed}], 0x2}}, {{&(0x7f0000002300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r24, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e20, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002380)="ac73562d755469c45be038ae83f8ba55d9f1618fd6def6efcdbf1c586681ef27d7570e94198fe3d50eb8058e6d849744fee57e8ff3b07ef4f272a0c0e63ce754af3c5caeb76b4154e76956956043c9cb4de5132ecfe79c2754ae81c2f86080456dc3fd53dd1142d0ec51c77f2b93eb3be8ba1e84f18253cb2cacfe1bf767b24ff8ca76266cefdb853c0383d8b428ad8d2e843e8fb596d3eb22acbdf18429dddadfa70bf632bd29e3e260b995ce76a904784d027dd8896fee8b0a49a417f17a89f272b7262880c310cd615b3adaf3f003e29e74", 0xd3}, {&(0x7f0000002480)="1581e37d415a00cd3ec337a551bfc9fe2ffe746adcac07cdf277555acdbd194da664ae6f2cdf8b907d7fd280f376eff98cf4e68d8d6a7d714a4b9621944415f12c9551862928d68a7569cc6761396a0700b8866f79c7491a7bff00e06f638b95e1e126081a83cd939b6ce016ec92d45950e064a2c5fadbf1b4bde1345a56451455bec1eea96e1c34adb5f59c93f4f7da63f21b0c98dedfb76f9a9ea22e4e761728e5c627856d4cc9696328bde70c7579e1dc0a352482daa8b140de99053de8f25a03e5b5f9f127841079cdb4e5", 0xcd}, {&(0x7f0000002580)="5cf5e122c8109d892fb9f285e02b64ef9600ba84f2036255db5e32350470b480d9e2455c750625991d543bb8edfc07538c9bcbb76f1b24351d593a4a97fafac1ebc46a1b8837c2ad26ec78a86d8bb3f6e57470002cbef626f6b383ed0d512340ed81cba21ab0f6e7f34cce1531ecc7ec4644f9045d84dc7970ad10375e60f5db0ea20173b8e009834ac194728bea4691dd34968e652d3594f20e1c11e2e751a7dd81b7650f72290cb9cbea173c7cb6724de585f4", 0xb4}, {&(0x7f0000002640)="b6c561303761d0abafd9b19ffa9d2c67d78a87a7572c6ad3eec930b13865fe5fcede47f2ac3647dd59ec379eccb5f2f2e30e6749a74cdabcf46ed44fabf50abec1fc617c3b47bca92a46", 0x4a}], 0x4, &(0x7f0000002700)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x18}}, {{&(0x7f0000002740)=@nfc_llcp={0x27, 0x0, 0x2, 0x2, 0xb8, 0x3, "f5f2074b068f43776c6ed7e8151eb2df5aece3d9c89e4f8f2443d1c24cdd78da4c90ceac0e71280d0c61a0880694849ea048dcd9c8d52996fa35a02a6f0185", 0x2d}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000027c0)="e6be863b596c8bfd13a5543e3877cc7c524c8455c42e0b5cf11f43cdb8ae47468266e63255e87690519f733a6dfb280c4769e9cffb34f80c8bf0e4459b03a78b8c4cdd8d2b7642663373135f81b695025c82c47c76c1d8452a38c82274b7dd4056ee09909672d3a650a02affae19dbcddf", 0x71}, {&(0x7f0000002840)="c2ddbe3b1340b95083868d4fef7e363a", 0x10}, {&(0x7f0000002880)="d4d37615a5d1fc727edd95d792", 0xd}, {&(0x7f00000028c0)="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", 0xfe}, {&(0x7f00000029c0)="5ac77b5af087c1d4af15f7a73e3daab08702ce43133e19684e9c275da8c859ef262f233aa0925726aa1a76f41ca9c29c2b5460c9e234f667f961cddc1a22dda8330131be831311819403f6e098f1948954fbc9f275a8f8b3aa70e4794742dd9f66f015fba8c8652dd76b6433ecaa51622e1551e6c445e0d419ad5dfbe826b1bb03b74d6d8943b4d5e35f7d06702785c2c4185a39b43530e0033077300e1e322841ef1ab4db30eedbc944c975bac22697c02ae8c667d2bd61dd159f5b16856b9b05ec743d36adf4dcb2e0ddd637e015cf2db476090f0778798f96e9a6537dafc29a8a6ba857733e8405bbfbd0dc4db8a0a8b019", 0xf3}, {&(0x7f0000002ac0)="4f5353d3c0057c5a764631d7bfeb2f211bcca51794e62933fab4666d26fd11858a1e5773916e691682d5e8502543faf07f6f57572cbecf7c6faa8f502fd2547c5f374e0c2b38d1dbe5d6dce5a4e34f7083e5e52f9bee1028f7b01f49a6", 0x5d}, {&(0x7f0000002b40)="92ee166c9583b297da9cba6aa73081574f3caf9d46bf0805b7d45da231d9748880d36c84aab3095136d80d0405a2cec4f59a551a0b8b6abc0b07f7b77d9f82a95b7b84074f4454b70e44405c5911e20880c0e1c61c3731fbe1c0597b27c44a6c8a69663ef3cd06999ebae48857e01578d11a05e20abec1cbf9df710607e009f672a17a5e6320833006de9a4224da77a32d30167315392c6e4c76cf4205fb0e2ca8feafda2de01cab38b9f273e24b064739de89ca0eb2429ed44e753d6cfb6e2614756d22e1e9fde5ba59ec370562f837c89cb1389902c03991c973d8f9513afc8f5438d24b04e61e85ac8996a964156067492858548d", 0xf6}, {&(0x7f0000002c40)="d94f2c111e738fc9bdeba0e28b81921b51789aa3978a7cca41030d14", 0x1c}, {&(0x7f0000002c80)="48629f89aebb6f9ac09ed9d7faee8862f5dd0481ddd26bccae2beee278c75dcced622c6dcee7d6c52ceffb23f625ae47653f08287501b3932af07e7ae8e836e8416240094ecfbadabc2a31c63f647a0e9b48b06e77cf8cb09962d4cb72", 0x5d}, {&(0x7f0000002d00)="fcccd0366f1c25f64ceac862ddf3e57286fd97be749023bdcb5601f865d34709f2cbf6f47cd90fa78430608da323575f968d65e9f7e12cfc0771427950e8a24242f8e3db39491dc4a816f329252437ad3ada3ae97aa3a8", 0x57}], 0xa, &(0x7f0000002e40)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0xe000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1f}}], 0xc0}}], 0x7, 0xcbf5e193a29898f) r25 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r25, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000440)) 04:52:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r6, &(0x7f0000000040)=""/11, 0xb) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000a8b7f32a6949b3ea50677e046aebfa8a9cb489790fb0"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006040000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, {0xa, 0x0, 0x0, @remote}, r11}}, 0xb8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r11, 0xfffffedf}}, 0x18) 04:52:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:33 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1042.146097] FAULT_INJECTION: forcing a failure. [ 1042.146097] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.146754] CPU: 1 PID: 2427 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 04:52:33 executing program 3: socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r8) read(r4, &(0x7f0000000040)=""/11, 0xb) r9 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b007369a3e6c8125a24e78f00ff08010000000084aa0800050000000000"], 0x38}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r10, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000000), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r12, &(0x7f0000000100)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffce0) vmsplice(r12, &(0x7f0000000140)=[{&(0x7f00000000c0)="c76dc1f57e822bb4c8eddcdb80b1d582cffe26e6a02c19620668538458a1235a4ad4ac9ccb8c85f771f6348452190e"}, {&(0x7f0000000100)="dc4ef34ebe07be5a94b2984c56676b4f6ee7b8879f51edeb2152ec25bde8426d0672464776ee25036df508fea3a395debbce16d0"}, {&(0x7f0000000500)="eb39503c18045234eac6f689a32b140a799cddbb1e5e4cfa61e6c5cb10a192a3620353209db93b1ed15e1d2e90f4b06df1304ee08a9f5c8a02994300bfa30dd46afdad33bac45eb53a8bbf5caee20b8063a01780aaa68ce9dffed001a7999b79a4ab111e9d19c3264b1cb560e4c3dc3251642ea9d27ee7fa6d6aa056d974e6150cf3b580a354aa4dd666ce50932fd822a735b5a44e68af27475bf5d58908c0cee3951c337e7c58e810117a01ba", 0xfffffffffffffe01}], 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 1042.146761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.146765] Call Trace: 04:52:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1042.146782] dump_stack+0x142/0x197 [ 1042.146800] should_fail.cold+0x10f/0x159 [ 1042.146817] should_failslab+0xdb/0x130 [ 1042.146827] __kmalloc+0x71/0x7a0 [ 1042.146911] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1042.146923] ? bit_cursor+0x9d6/0x1830 [ 1042.146935] bit_cursor+0x9d6/0x1830 [ 1042.146955] ? bit_clear+0x4a0/0x4a0 [ 1042.146962] ? fbcon_putcs+0x3c2/0x480 [ 1042.146970] ? fbcon_putcs+0x223/0x480 [ 1042.146980] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1042.146992] ? fb_get_color_depth+0x5f/0x70 [ 1042.147003] ? get_color+0x1bf/0x3b0 [ 1042.147016] fbcon_cursor+0x4e3/0x6f0 [ 1042.147025] ? bit_clear+0x4a0/0x4a0 [ 1042.147046] set_cursor+0x1bd/0x240 [ 1042.147057] redraw_screen+0x596/0x7c0 [ 1042.147069] ? con_flush_chars+0x90/0x90 [ 1042.147078] ? fbcon_set_palette+0x203/0x5b0 [ 1042.147092] fbcon_modechanged+0x59e/0x880 [ 1042.147109] fbcon_event_notify+0x11f/0x17af [ 1042.147123] ? lock_acquire+0x16f/0x430 [ 1042.147159] notifier_call_chain+0x111/0x1b0 [ 1042.147177] blocking_notifier_call_chain+0x80/0xa0 [ 1042.147190] fb_notifier_call_chain+0x25/0x30 [ 1042.147200] fb_set_var+0xb09/0xcf0 [ 1042.147213] ? fb_set_suspend+0x110/0x110 [ 1042.147222] ? lock_acquire+0x16f/0x430 [ 1042.147230] ? lock_fb_info+0x1f/0x80 [ 1042.147243] ? lock_fb_info+0x1f/0x80 [ 1042.147255] ? __mutex_lock+0x36a/0x1470 [ 1042.147265] ? trace_hardirqs_on+0x10/0x10 [ 1042.147280] ? mutex_trylock+0x1c0/0x1c0 [ 1042.147307] ? mutex_lock_nested+0x16/0x20 [ 1042.147314] ? mutex_lock_nested+0x16/0x20 [ 1042.147324] do_fb_ioctl+0x3cc/0x940 [ 1042.147333] ? fb_read+0x520/0x520 [ 1042.147351] ? avc_has_extended_perms+0x8ec/0xe40 [ 1042.147362] ? get_pid_task+0x98/0x140 [ 1042.147375] ? avc_ss_reset+0x110/0x110 [ 1042.147393] ? __lock_acquire+0x5f7/0x4620 [ 1042.147404] ? lock_downgrade+0x740/0x740 [ 1042.147440] ? __might_sleep+0x93/0xb0 [ 1042.147450] ? __fget+0x210/0x370 [ 1042.147465] fb_ioctl+0xe6/0x130 [ 1042.147475] ? do_fb_ioctl+0x940/0x940 [ 1042.147486] do_vfs_ioctl+0x7ae/0x1060 [ 1042.147497] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1042.147506] ? lock_downgrade+0x740/0x740 [ 1042.147516] ? ioctl_preallocate+0x1c0/0x1c0 [ 1042.147530] ? __fget+0x237/0x370 [ 1042.147549] ? security_file_ioctl+0x89/0xb0 [ 1042.147563] SyS_ioctl+0x8f/0xc0 [ 1042.147572] ? do_vfs_ioctl+0x1060/0x1060 [ 1042.147586] do_syscall_64+0x1e8/0x640 [ 1042.147596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1042.147615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1042.147624] RIP: 0033:0x45a849 [ 1042.147631] RSP: 002b:00007fe364675c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.147642] RAX: ffffffffffffffda RBX: 00007fe364675c90 RCX: 000000000045a849 04:52:33 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000080)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1042.147649] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1042.147655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1042.147661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3646766d4 [ 1042.147667] R13: 00000000004c3057 R14: 00000000004d8358 R15: 0000000000000004 04:52:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 1042.937299] FAULT_INJECTION: forcing a failure. [ 1042.937299] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.937312] CPU: 1 PID: 2492 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 1042.937319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.937322] Call Trace: [ 1042.937338] dump_stack+0x142/0x197 [ 1042.937355] should_fail.cold+0x10f/0x159 [ 1042.937382] should_failslab+0xdb/0x130 [ 1042.937392] __kmalloc+0x71/0x7a0 [ 1042.937406] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1042.937417] ? bit_cursor+0x9d6/0x1830 [ 1042.937431] bit_cursor+0x9d6/0x1830 [ 1042.937451] ? bit_clear+0x4a0/0x4a0 [ 1042.937460] ? fbcon_putcs+0x3c2/0x480 [ 1042.937469] ? fbcon_putcs+0x223/0x480 [ 1042.937480] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1042.937489] ? fb_get_color_depth+0x5f/0x70 [ 1042.937495] ? get_color+0x1bf/0x3b0 [ 1042.937502] fbcon_cursor+0x4e3/0x6f0 [ 1042.937507] ? bit_clear+0x4a0/0x4a0 [ 1042.937516] set_cursor+0x1bd/0x240 [ 1042.937522] redraw_screen+0x596/0x7c0 [ 1042.937530] ? con_flush_chars+0x90/0x90 [ 1042.937536] ? fbcon_set_palette+0x203/0x5b0 [ 1042.937544] fbcon_modechanged+0x59e/0x880 [ 1042.937553] fbcon_event_notify+0x11f/0x17af [ 1042.937561] ? lock_acquire+0x16f/0x430 [ 1042.937569] notifier_call_chain+0x111/0x1b0 [ 1042.937578] blocking_notifier_call_chain+0x80/0xa0 [ 1042.937585] fb_notifier_call_chain+0x25/0x30 [ 1042.937590] fb_set_var+0xb09/0xcf0 [ 1042.937597] ? fb_set_suspend+0x110/0x110 [ 1042.937603] ? lock_acquire+0x16f/0x430 [ 1042.937607] ? lock_fb_info+0x1f/0x80 [ 1042.937615] ? lock_fb_info+0x1f/0x80 [ 1042.937622] ? __mutex_lock+0x36a/0x1470 [ 1042.937627] ? trace_hardirqs_on+0x10/0x10 [ 1042.937637] ? mutex_trylock+0x1c0/0x1c0 [ 1042.937652] ? mutex_lock_nested+0x16/0x20 [ 1042.937656] ? mutex_lock_nested+0x16/0x20 [ 1042.937663] do_fb_ioctl+0x3cc/0x940 [ 1042.937668] ? fb_read+0x520/0x520 [ 1042.937678] ? avc_has_extended_perms+0x8ec/0xe40 [ 1042.937683] ? get_pid_task+0x98/0x140 [ 1042.937690] ? avc_ss_reset+0x110/0x110 [ 1042.937698] ? __lock_acquire+0x5f7/0x4620 [ 1042.937704] ? lock_downgrade+0x740/0x740 [ 1042.937722] ? __might_sleep+0x93/0xb0 [ 1042.937727] ? __fget+0x210/0x370 [ 1042.937735] fb_ioctl+0xe6/0x130 [ 1042.937741] ? do_fb_ioctl+0x940/0x940 [ 1042.937747] do_vfs_ioctl+0x7ae/0x1060 [ 1042.937753] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1042.937758] ? lock_downgrade+0x740/0x740 [ 1042.937765] ? ioctl_preallocate+0x1c0/0x1c0 [ 1042.937772] ? __fget+0x237/0x370 [ 1042.937782] ? security_file_ioctl+0x89/0xb0 [ 1042.937790] SyS_ioctl+0x8f/0xc0 [ 1042.937795] ? do_vfs_ioctl+0x1060/0x1060 [ 1042.937804] do_syscall_64+0x1e8/0x640 04:52:34 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1042.937809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1042.937819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1042.937824] RIP: 0033:0x45a849 [ 1042.937827] RSP: 002b:00007fe364675c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.937834] RAX: ffffffffffffffda RBX: 00007fe364675c90 RCX: 000000000045a849 [ 1042.937838] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1042.937841] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1042.937844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3646766d4 04:52:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1042.937847] R13: 00000000004c3057 R14: 00000000004d8358 R15: 0000000000000004 04:52:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x660, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b007369700064000100080004004e21000008000800c8070000080009002000000014000300e000000100000000000000000000000014000300fe8000000000000000000000000000bb080004004e2200000800080002000000080004004e220000080002004300000008000600000000000800050000000000"], 0x94}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x1000, 0x40, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}) 04:52:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000049b7904f00000000d2a1393c50046c3565b96118abdd80e6103df77f0ded2ed1aff3eef1625fbb7c41d5e3f75cfcc954e59f3be93e1ac08d3b282afa4351ce28b39d4c947095d8312b735061542466f5ffa92001f1e8eac50d5ee50d598788e2bcf408e828b7b91bc7645d89fdc22cae33783d3c0ab3fc4d55bfc6d9632a96dfedcf5a48e91cd93506ec008f", @ANYRES16=r5, @ANYBLOB="000028aee000ffcbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = semget$private(0x0, 0x0, 0x8) semctl$SEM_STAT(r9, 0x4, 0x12, &(0x7f0000000480)=""/182) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x1ff, 0x2, 0x6, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)) 04:52:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80041, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1044.400173] net_ratelimit: 14 callbacks suppressed [ 1044.400179] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.410605] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.480140] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.485657] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.490943] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.496238] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.501512] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.506828] protocol 88fb is buggy, dev hsr_slave_1 04:52:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 04:52:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:35 executing program 0: r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0xffffffffffffffd1, 0xfa00, {0x2, 0x0, 0x0, 0x6}}, 0x1a) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x57f) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4280, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000100)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x7}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fstat(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000013c0)='./file1/file0/file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f00000019c0)={0x126, 0x5, &(0x7f00000015c0)="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"}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r10, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0xffe4) r11 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000001a00)={"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"}) pipe2(&(0x7f0000001480)={0xffffffffffffffff}, 0x84800) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r14 = socket$packet(0x11, 0x3, 0x300) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r14, &(0x7f0000000100)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e00)=0x1de) r17 = openat$userio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/userio\x00', 0x10000, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000000c0)=@file={0x0, './file1/file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000001c0)="347b379f8d5565180a55a30b5c840b2e48ba864b7e34bc7b9c73f76b4759865cf8aa5b535347ed40eb5a058412531a4a79f11969e67c8df57ec44c34413d651a60059f0b361b7626", 0x48}, {&(0x7f0000000140)="a4d42f8127a282d95a4d0dce44f6ec25a72a23bbf5bca22ae840a2fa3197fb654bf95e545a0d5c75b630a0648e2140f8c0ddbdc07aabc0e9e861", 0x3a}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="34e36cf7fd1d62d441642720048a0e467d3de6442ca518cc73016ac41176200d768b7ef146015a46fb4df63e1bd3599e906c88449eacce5ed1ff93257cb9a5a39a93aef72b6e21d9b6741ee468af307a0c8c4eaf6be567a111a35c18f5310d0f2365965a0c22dcf3d9b6f7a8230616ad48a7da4ad4584e55897875336888b0aeaa6ee38ae4ae145719d95df423ad451ba2578c4fae3a337b6482680d06429b76dc867a1b53fe7e3605a9f313", 0xac}], 0x4, &(0x7f0000001f40)=ANY=[@ANYBLOB="1c0020000000bc15240694f0d9ba9eb80070b7eb0c0002000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="6306150000a8ec37c89761340262170000e7f5941f2eeccc98386b6ab935f0fc8a4dffeea23400000000e354442e6e741d5a7edceb0071ed22374c59840f15ddc4defe445f758a05c64cec8320de5dec15baeaf2118f0cfd96043f20f3059fa220909837be2c92b69a160fac", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r17, @ANYRES32=r1], 0x58, 0x4030}, 0x2c040000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2, {0xfffffffd}, {0x5}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x1ff, 0x2, 0x6, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)) 04:52:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r6, &(0x7f0000000040)=""/11, 0xb) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000a8b7f32a6949b3ea50677e046aebfa8a9cb489790fb0"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1046.480203] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.485613] protocol 88fb is buggy, dev hsr_slave_1 04:52:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000775cc11cd5cc6f987cbecadc311a4f324ca1c8e1e988abc1afed8de64ec005cdf6081df80617514d90b9a7345476661d58d7c49cca2196913d4d56f71888c0db58264a642e626e2a52d013b7d2239ba51d8cdce604d4ecce5902923b8735949aca39d637158145dbb2b549f5df7eff01956e39f5120131ac5d9c15d18cf607c553aade5b49ca335cfedff5c11b1dabc81bfbb58f17098b3b5479bd3b87c24bbec05e797c8ceb9fc4703f0000000000de00000000f455025e04d355949a09eb9d2c28a0d899972bec00f684fe89b212acb3bf141706e9faf066d2edd8da7a41f27a80f1a5bc33f64003dfecf3ec3a0b0756914d8132aafeac4ecdadbc22fea5d5e14cbef5209544f77becd603e5116d9dd8b0725d96480f33765dbf5fdcfc6dce2a7b2a915d96c73f4654e25939510b0bebee7f8ffe2b82d1a86dbe015f521a7bc4f75ff5283ae9874f18e6e3", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x3}, {}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:37 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000040)='./file0/file0\x00', 0x6, 0x9, &(0x7f0000001800)=[{&(0x7f0000001900)="04d5a784632af8b97efa07ad7220a04a147b7843f12c05ffdee50a5e3110e86eb68a0f982357d8812a3b6f6a3403461a3f72500f20a41565d6fd0161dc96afe685ee9249aa3f349a900627eaaee18466716930222afa45662ee70e1a7e4fafe70eefabd88ba13237f740b2a8602ec4add9550ecea1b63b80e9f904b1dda64cbf0baa79c2f30e882b2cc412ce687b2c3cef04bcba701a0aa17bd235d6e06240460ffe8b9e1feefbe25471ee33308219080ac628cb501f87caf765d5df1742cf52a4fb45d5a536a8f7d0f39f45d17f9c04828a1df745225e958cbe912b702770ed7eb2ef4d5c68ed64f68a9bf6fa1e247c2c0b15000000", 0xf6, 0x80004001}, {&(0x7f00000002c0)="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", 0x1000, 0x5}, {&(0x7f00000012c0)="11b33c22ee0002000000000000d25e5d9b60e79c3c8d75d6f02c3a59978c9f0240993d648efaf9420c73c2198f646b7614e95f48b0008dc59b0d82e2a6870993038efb131e671a992c78e7e7a00563dfa0b4eceefa0ed9ae6f2ec74ce89ac06f030a0bfcdbee04d15938904737b3da9a41648c73e9c3401260224b49e45913f7596af59754257b41e09f48714406c117f4979a9676807efed6354720b62b354db96e1f18f2a335f71846da25a679daf4c4dc2cb21513a0d22f16ceb2f8dcfbd93430e2082f59933d1560e01d85231c4c0d4bfc270fc612df741f6ee2c954e454a8", 0xe1, 0xffffffff}, {&(0x7f00000013c0)="be40a914484af81f8dc13b9c206767703a19650594883ce202aa27283336279b50bae97924561c94297c1e75f47eb7a072db98ed00bd7be339ef2f134530dd90cfde24b2fd3e546012c27e51c18299041327e7e94c640987ac", 0x59, 0x4}, {&(0x7f0000001440)="352b3f8fcad42514962b0941509dfb695ab0f8eb386eee36ca1c1e70ae14b3adb178f1bbc16fdc904eeaa9053a74e3af17ad18c4780db4c22fa8884b851e21ded7057ff0e1b2f9ea173e3d3d0c7e22395b4e25bf7818161e19a7ecfadeb2953b933190131a9f54a112f1e570b281b83d7347272877f4c239599fd54f963ecd59eb0d1a556e9545b63384b7f3e28e9df91ca115231c4f7ac6453526c7eab314921f65ce7772db", 0xa6, 0x4}, {&(0x7f0000001500)="ab637b5d7c0fa465fd439845ee94fa8ce28db3dcf117be37176bfb420831195a9d02213987bf8c34110187dd8daee227325a4b2166cee50a5178a00a16fbc94f7031a609ee7071048571fec72daf2f7f5c3cc73ae59bad81661179c8a6b368e2ed522f785b508174db886236856b7f978791d5d71c825749d3cf00d306a993479e40c1d0a2cce0bf0e8e1af5dce5a24747e8a5c8a612843a8df7130be0611611202ca3c07e8d8984e440f4fe37a558d739f70a21fb53889e19cc030d14b6c6a8ab890ded7ccb50831ea9609deddfea410bb94884aafb02", 0xd7, 0x4}, {&(0x7f0000001600)="1661f76019a2d0672dbef084e8835baddd34c22de56a61a7d73b10e7145cbcb5a5c6c0e85cb3d59103c52b4a8153106b8a07eff13da104f5e9992ad9704b5b0235cdbbf85b65d5ce12976b474d047161c4576ffee33ebfaadbd8415dfeaeed53c0c1", 0x62, 0x1}, {&(0x7f0000001b00)="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", 0x18c}, {&(0x7f0000001740)="338f2020ef522f01bc49b693575cfc7c8d43e9aca31acc5c7239811d0cc02c6485c82c6ddd5b63320f21aa98739b14e4697f2b3da8dd217bd1bb644453f4681a8454e3c62b5208a333d5b53d73d62e702dfc612c8e9beed66ca6c90cc3b83e276bf65668b6ff95ebed54fe56b12599a968f85f2148a0b98a1c55092983a02bc32aa9ed0986d9144d", 0x88, 0x7}], 0x820810, &(0x7f0000001680)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000001e40)=ANY=[@ANYBLOB="4de39db87fdf2c4853214c8e85d08f56615b2a95bd765d0a917fd119b99c35f2bb8e7ee0a02b1f039ada29fd7348f6f3f60738f139fc18d21bde43ba2c93a2df9a53e13f11fbcaee2ed31934e98474c47fb8e7f4126bcf1d03cf9b0cc7bca99846f84c778d155d51d1497cb18833fd1091cd266cb20400b9e12df9798c7d7a71214695aa5138db9888776f90d354e7ff0ce22c6cc5b53861fbc4241a09ce5425460f5343c3144c425c6f582b6adc61d17a2283704e588925535ea93418dd67f8db43c579071b16a7ba0573e342061c71a7db28396ae86621986cdec0", @ANYRES32=r0, @ANYBLOB="aa9fab743aa37e0c6b451690f850328d30161f011a71219d3fba150db609ffff0000111c002a1a4f53b8e4de1ea7554c70f7b7f34c68f7c98717b0eb675989923f0885107370ea384d845692e5326472f1bb88bb5ed6f7d38280ebb59b7ac4b3de67102cd600fb98a41703d82f9563ea7b0b31834eb6f5", @ANYRESHEX=0x0]], @ANYBLOB="12629183aea61c4c985b4812f17a5d1a429b733a6fcba6be6357ec1067b1b262faa5f57693c96ed2461065c6f19b688bdea4ec17a5dea4dc8f9a0e35c8c448c5797da80637d48955866c833bfa4bc0dcaa3636a715e8961130ee434a5c7d7f7b21ee80ffcea68ea5971d53408e773c12862c7fa9237e6d84", @ANYRES64=r1]) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000001c0)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r7) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001a00)={{{@in=@remote, @in=@empty, 0x4e23, 0xd4, 0x4e22, 0x401, 0xa, 0x0, 0xc1e34d9b4a6fe325, 0x2c, r3, r7}, {0x5, 0x1, 0x74, 0xffffffffd7b1122c, 0x5, 0x1c, 0x898, 0x8}, {0x3, 0x8, 0x9, 0x7fffffff}, 0xffe00000, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0xb4}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x0, 0x1f, 0x3, 0x5, 0x5}}, 0xe8) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000000)={0x4, 0x0, 0x20, 0x400, 0x2, 0x80, 0x4, 0x0, 0x8}) r8 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000140)=0x7, 0x4) 04:52:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r6, &(0x7f0000000040)=""/11, 0xb) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000a8b7f32a6949b3ea50677e046aebfa8a9cb489790fb0"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x100, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xffffffffffffff2b) r1 = socket(0x4, 0x80000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000016000d022dbe7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000000) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x109, 0x2, 0x0, 0x0, 0x7, 0x4000000}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000300)={0x1f, 0x7fffffff, 0x3, {0x0, 0x1c9c380}, 0x4, 0xf5f1}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) r9 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendto$inet(r9, &(0x7f00000004c0)="3e52c5b57f323f419365d7a10d66de4581caa697deeb507291a4aa209c01fbe43b886c636147903cd88012b5982f8960f56317dacfc5ddab7b8929f776cbd15872dd6ba5b9456a721bbf117d7a984c2bacf84cafdd0753e5073a43f1211dcd17da60135e2ee09934b9", 0x69, 0xf990fddbd51a0635, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r11 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r12 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r13 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r14 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r15 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r16 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KDSKBLED(r2, 0x4b65, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f00000000c0)={0x7, 0x3, 0x1}) 04:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r6, &(0x7f0000000040)=""/11, 0xb) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b0073697000080006000000000008000600000000000800050000000000a8b7f32a6949b3ea50677e046aebfa8a9cb489790fb0"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}) 04:52:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffff, 0x62042) 04:52:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 04:52:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x3}, {}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:41 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:41 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1000, 0x0) getpeername$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@netrom, @null, @null, @rose, @null, @default, @null]}, &(0x7f00000001c0)=0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5, @ANYBLOB="0000009d5c0000000000"], 0x20}}, 0x0) r6 = fcntl$dupfd(r1, 0x0, r0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000002c0)={r0, r7, 0x40, 0x9d, &(0x7f0000000200)="6bc50df63d55cb426de07d0ad96013e19cf0f250dcd5e56b510eca86610a311aa23eaf78790a6eea49957857540f74e95e5fbc84466a656d6040b9617a33ec07a36413615d53d32cce28f6eb7cfb1fe1ec84736c7ef46b5e3d94a74a98e8b8736c1059c95990834d268e40107f1a71347d69320b89c4425882f4d0fd9aa71a9166e52369143b60e9ab1a33995f08ce4d20583661ebd8b375b264a1c657", 0x1, 0x86, 0x400, 0x7fff, 0x7fff, 0x1, 0x800, 'syz1\x00'}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000240)={0xdd, 0x200, 0x1, 0x4, r11}, 0x10) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 1050.424689] FAULT_INJECTION: forcing a failure. [ 1050.424689] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.424705] CPU: 1 PID: 3111 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1050.424710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.424712] Call Trace: [ 1050.424725] dump_stack+0x142/0x197 [ 1050.424736] should_fail.cold+0x10f/0x159 [ 1050.424747] should_failslab+0xdb/0x130 [ 1050.424753] __kmalloc+0x2f0/0x7a0 [ 1050.424762] ? trace_hardirqs_on_caller+0x400/0x590 [ 1050.424775] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1050.424784] ? vc_do_resize+0x1da/0xec0 [ 1050.424796] vc_do_resize+0x1da/0xec0 [ 1050.424808] ? fb_match_mode+0x213/0x2a0 [ 1050.424825] ? vt_console_print+0xf70/0xf70 [ 1050.424837] ? trace_hardirqs_on+0x10/0x10 [ 1050.424846] vc_resize+0x4d/0x60 [ 1050.424853] fbcon_modechanged+0x36b/0x880 [ 1050.424862] fbcon_event_notify+0x11f/0x17af [ 1050.424869] ? lock_acquire+0x16f/0x430 [ 1050.424878] notifier_call_chain+0x111/0x1b0 [ 1050.424888] blocking_notifier_call_chain+0x80/0xa0 [ 1050.424895] fb_notifier_call_chain+0x25/0x30 [ 1050.424901] fb_set_var+0xb09/0xcf0 [ 1050.424908] ? fb_set_suspend+0x110/0x110 [ 1050.424913] ? lock_acquire+0x16f/0x430 [ 1050.424918] ? lock_fb_info+0x1f/0x80 [ 1050.424926] ? lock_fb_info+0x1f/0x80 [ 1050.424931] ? __mutex_lock+0x36a/0x1470 [ 1050.424937] ? trace_hardirqs_on+0x10/0x10 [ 1050.424947] ? mutex_trylock+0x1c0/0x1c0 [ 1050.424962] ? mutex_lock_nested+0x16/0x20 [ 1050.424966] ? mutex_lock_nested+0x16/0x20 [ 1050.424973] do_fb_ioctl+0x3cc/0x940 [ 1050.424979] ? fb_read+0x520/0x520 [ 1050.424988] ? avc_has_extended_perms+0x8ec/0xe40 [ 1050.424993] ? get_pid_task+0x98/0x140 [ 1050.425001] ? avc_ss_reset+0x110/0x110 [ 1050.425009] ? __lock_acquire+0x5f7/0x4620 [ 1050.425014] ? lock_downgrade+0x740/0x740 [ 1050.425033] ? __might_sleep+0x93/0xb0 04:52:41 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1050.425039] ? __fget+0x210/0x370 [ 1050.425047] fb_ioctl+0xe6/0x130 [ 1050.425052] ? do_fb_ioctl+0x940/0x940 [ 1050.425058] do_vfs_ioctl+0x7ae/0x1060 [ 1050.425065] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1050.425070] ? lock_downgrade+0x740/0x740 [ 1050.425076] ? ioctl_preallocate+0x1c0/0x1c0 [ 1050.425083] ? __fget+0x237/0x370 [ 1050.425094] ? security_file_ioctl+0x89/0xb0 [ 1050.425101] SyS_ioctl+0x8f/0xc0 [ 1050.425106] ? do_vfs_ioctl+0x1060/0x1060 [ 1050.425115] do_syscall_64+0x1e8/0x640 [ 1050.425121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1050.425130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1050.425135] RIP: 0033:0x45a849 [ 1050.425139] RSP: 002b:00007f6ebf750c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.425146] RAX: ffffffffffffffda RBX: 00007f6ebf750c90 RCX: 000000000045a849 [ 1050.425149] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1050.425152] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1050.425156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ebf7516d4 [ 1050.425159] R13: 00000000004c3057 R14: 00000000004d8358 R15: 0000000000000004 [ 1050.640161] net_ratelimit: 14 callbacks suppressed [ 1050.640167] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.640220] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.720121] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.720183] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.720268] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.720310] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.720411] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.720453] protocol 88fb is buggy, dev hsr_slave_1 04:52:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x360, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) [ 1051.079136] FAULT_INJECTION: forcing a failure. [ 1051.079136] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.079147] CPU: 0 PID: 3150 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 1051.079154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.079159] Call Trace: [ 1051.079174] dump_stack+0x142/0x197 [ 1051.079198] should_fail.cold+0x10f/0x159 [ 1051.079215] should_failslab+0xdb/0x130 [ 1051.079225] __kmalloc+0x71/0x7a0 [ 1051.079238] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1051.079249] ? bit_cursor+0x9d6/0x1830 [ 1051.079262] bit_cursor+0x9d6/0x1830 [ 1051.079280] ? bit_clear+0x4a0/0x4a0 [ 1051.079288] ? fbcon_putcs+0x3c2/0x480 [ 1051.079297] ? fbcon_putcs+0x223/0x480 [ 1051.079307] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 1051.079318] ? fb_get_color_depth+0x5f/0x70 [ 1051.079328] ? get_color+0x1bf/0x3b0 [ 1051.079341] fbcon_cursor+0x4e3/0x6f0 [ 1051.079349] ? bit_clear+0x4a0/0x4a0 [ 1051.079361] set_cursor+0x1bd/0x240 [ 1051.079370] redraw_screen+0x596/0x7c0 [ 1051.079383] ? con_flush_chars+0x90/0x90 [ 1051.079391] ? fbcon_set_palette+0x203/0x5b0 [ 1051.079404] fbcon_modechanged+0x59e/0x880 [ 1051.079420] fbcon_event_notify+0x11f/0x17af [ 1051.079434] ? lock_acquire+0x16f/0x430 [ 1051.079447] notifier_call_chain+0x111/0x1b0 [ 1051.079464] blocking_notifier_call_chain+0x80/0xa0 [ 1051.079475] fb_notifier_call_chain+0x25/0x30 [ 1051.079483] fb_set_var+0xb09/0xcf0 [ 1051.079496] ? fb_set_suspend+0x110/0x110 [ 1051.079505] ? lock_acquire+0x16f/0x430 [ 1051.079511] ? lock_fb_info+0x1f/0x80 [ 1051.079522] ? lock_fb_info+0x1f/0x80 [ 1051.079532] ? __mutex_lock+0x36a/0x1470 [ 1051.079542] ? trace_hardirqs_on+0x10/0x10 [ 1051.079557] ? mutex_trylock+0x1c0/0x1c0 [ 1051.079591] ? mutex_lock_nested+0x16/0x20 04:52:42 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1051.079599] ? mutex_lock_nested+0x16/0x20 [ 1051.079611] do_fb_ioctl+0x3cc/0x940 [ 1051.079622] ? fb_read+0x520/0x520 [ 1051.079638] ? avc_has_extended_perms+0x8ec/0xe40 [ 1051.079648] ? get_pid_task+0x98/0x140 [ 1051.079661] ? avc_ss_reset+0x110/0x110 [ 1051.079675] ? __lock_acquire+0x5f7/0x4620 [ 1051.079686] ? lock_downgrade+0x740/0x740 [ 1051.079718] ? __might_sleep+0x93/0xb0 [ 1051.079727] ? __fget+0x210/0x370 [ 1051.079741] fb_ioctl+0xe6/0x130 [ 1051.079751] ? do_fb_ioctl+0x940/0x940 [ 1051.079762] do_vfs_ioctl+0x7ae/0x1060 [ 1051.079772] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1051.079781] ? lock_downgrade+0x740/0x740 [ 1051.079793] ? ioctl_preallocate+0x1c0/0x1c0 [ 1051.079806] ? __fget+0x237/0x370 [ 1051.079824] ? security_file_ioctl+0x89/0xb0 [ 1051.079836] SyS_ioctl+0x8f/0xc0 [ 1051.079846] ? do_vfs_ioctl+0x1060/0x1060 [ 1051.079857] do_syscall_64+0x1e8/0x640 [ 1051.079865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1051.079883] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1051.079891] RIP: 0033:0x45a849 04:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 1051.079897] RSP: 002b:00007f6ebf750c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.079908] RAX: ffffffffffffffda RBX: 00007f6ebf750c90 RCX: 000000000045a849 [ 1051.079914] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1051.079920] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1051.079927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ebf7516d4 [ 1051.079933] R13: 00000000004c3057 R14: 00000000004d8358 R15: 0000000000000004 04:52:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0)) 04:52:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xe58de544aec54101, 0x0) 04:52:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) splice(r0, &(0x7f00000000c0)=0xc, r1, &(0x7f0000000100)=0xb789, 0xde8, 0x9) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x400, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xffffff74, 0x0, 0x3}) 04:52:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:43 executing program 3: r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x48, 0x2}}, 0x14) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0x6000887f, 0x0, 0x2}, {0x9ac, 0x0, 0x1f}, {0x9c2, 0x0, 0x8}, {0x2de, 0x0, 0x401}]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1052.720128] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.725254] protocol 88fb is buggy, dev hsr_slave_1 04:52:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x5, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r2, &(0x7f00000001c0)="18184e673c01ce1b4abcef47f0b33796752c0dad3d06d129c1caea84a0423d270adc27b21a3f8492338d9e58ffa02404db3c513149481c22dda2ff2c132b05f55ff1b86fc824551f163ea2345b418f79ab7e732f924f20eebd1e9f7cf682c50118bce33f5906176451a89f06aa7d83b522a8d99f4bddfc5ea6941a8c8e741a3d4b7f79484fbb5e830d45f3ef18f78943538c4b800a14f61d75e809efbd9c4665139278cee3bc9ebc457df5a43a09fe5728572ccc1da08defc78988c3723ffd0d153c2f9b3ca4ab", 0xc7) 04:52:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x7}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8a163dd27d043354, @perf_config_ext={0x800, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) 04:52:44 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000740)) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8d}, 0x0) r8 = getpid() r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r9, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r9, 0x5386, &(0x7f0000000300)) sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000380)="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", 0x76ca716) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x1, 0x10, 0x8001}) 04:52:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1053.529094] audit: type=1400 audit(1576126364.606:541): avc: denied { map } for pid=3289 comm="syz-executor.3" path="/dev/zero" dev="devtmpfs" ino=1043 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1 04:52:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:45 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x9, [0x3ff, 0x8372, 0xdc, 0x1ff, 0xfffe, 0x400, 0xfffc, 0x2a, 0x9]}, 0x16) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)={0x2, 0x6}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x81640, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/devt{ol\x18\x00', 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="541420d2f0c682be3f194d99a6b3399650ff6d5f614dc40e07efef4d9caaf182d57fe26b1aafcb273fc908a279d6f1a3ff946fa0bd1ed9536371bc5ef044d12f2921ee26f56ba70cdb8ca00ea5f8988ea3c181c57fdadcf26c7e9ece4fdf") r2 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x5131, &(0x7f0000000200)=0x2) 04:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r12 = fcntl$getown(r9, 0x9) process_vm_readv(r12, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/106, 0x6a}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000000100)}], 0x7, &(0x7f0000002c40)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000001840)=""/60, 0x3c}, {&(0x7f0000001880)=""/254, 0xfe}, {&(0x7f0000001980)=""/92, 0x5c}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000001b00)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/70, 0x46}], 0x9, 0x0) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:45 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$setregs(0xd, r0, 0x3, &(0x7f00000000c0)="07aa4c7b") r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x20, 0x280, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 04:52:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r2, 0x0, 0x262) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x10001, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140), 0x4) 04:52:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x356, 0x78, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0xfffffffd}, {}, {}, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3}) 04:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:46 executing program 0: sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'teql0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) ioctl$TCSBRK(r1, 0x5409, 0x10001) r3 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in=@empty, 0x4e21, 0x0, 0x4e23, 0x1000, 0xa, 0x20, 0x60, 0x31fe12aaa1a91152, r2, r4}, {0x1f, 0x0, 0x40000000000, 0x80000000, 0x2, 0x80, 0x4, 0x2b71}, {0x8, 0x3ff, 0x8, 0x10000}, 0x5, 0x6e6bbb, 0x1, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0xa, @in=@empty, 0x3500, 0x0, 0x2, 0x0, 0x2, 0x3d29, 0xd4a}}, 0xe8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x280, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x3}) 04:52:46 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x20}, {0x0, 0x8}, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:46 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xa0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x18b341, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0x8000, 0x9, 0x2, 0x0, 0xb7a, 0x7}) 04:52:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x3}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0xa6, 0xfffffffffffffffd, 0xb7, 0x81, @buffer={0x0, 0xb6, &(0x7f00000001c0)=""/182}, &(0x7f0000000280)="33cc474806e4ccd104bbdaf41218714394e0857ad97b8c7059a468fc0d26561ea362ddc3b0ee2b7a4712d5d69610e32ed76de54a0ba77759866c905ebc1d4b25459b7e759ae92b84c1e47e63f1512f643032b6a000c424e09aca64f6292085f05fa7b24bf414a3663cdfbceb0e05e87c31226844a8b53e5c7b11d213b91c69fdb66835276e71227d6ba581b68970a3ec329c8facff1192278beaa9dfa6ad2eb14f94f632fb4fa394e0bcb2f01561a2eeee188abb7455b3", &(0x7f0000000100)=""/123, 0x3, 0x5, 0x2, &(0x7f0000000340)}) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xb) 04:52:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x640, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xffffffff, 0x0, 0x2}) 04:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000007ac1c505aba13c01000000edcc3e5eb08cbc46d44c85ded22e64d291ffa660a09554ad08365bba608a21dc0be348e7b901eca14390107da30526d988a2", @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c0001f907000b007369700008000600f6c7a46ca3b0263900000000080005000000000016767c534245642d68070cf346f770234f79f20b740387bf8af00ce63043adb1df0800ae87c47ed8ee936133f57f331325acf7d962a4315a33a270a2f8d1709d3c3bb7b7ea26b8022f45616d0aabfebfbbd07c120b80c6766a8160edb66d829e9452fc5570b5165d23160f11ef00756efbf7f6fc7c036a61b749cdde392a77dcba3f15b63e420821b46c747801a81151f7ab233bd9e9c740fa7263bf3be6d211f275bbfea0f5abbe4b6f8404debc00ac8fa9bf799a573e9fde93f5343cd3c7da8f14da4a"], 0x38}}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000100)={0x9, 0x1, 0x3, 0x2}, 0x8) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r7, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040400}, 0x80c1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:47 executing program 0: r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d02, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x800}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x6}) r1 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0xa958, 0x10000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 04:52:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xc000000, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 04:52:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:47 executing program 0: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x21, 0x6, 0x2, "4ddcba9cba12b7bfab16689bc6a384d1", "0d6c0e17c85978c1289dbee8"}, 0x21, 0x1) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000001c0)={0x4, [[0x7, 0xcf48, 0xfffffffb, 0x1f, 0x9, 0x0, 0x1000, 0x1c0c], [0x80, 0xfffffffd, 0x1, 0x7, 0x6, 0x1, 0x6, 0x1], [0x1, 0x6, 0x9, 0xab4c, 0x5800000, 0x1f, 0x4250865c, 0xb28]], [{0x3c, 0x1, 0x4}, {0x100, 0x7ff, 0x92c}, {0x3f, 0x2a42, 0x40}, {0x5, 0x37458ef4, 0x80000001}, {0x1000, 0x7fff, 0x9}, {0x7, 0x9, 0x6}, {0x10001, 0x7, 0x81}, {0x5, 0xffff8001, 0x4}, {0x5, 0x100, 0x7fffffff}, {0x7, 0x100, 0xffffffff}, {0xb92, 0x7fffffff, 0x247}, {0x7ff, 0x1, 0x1}], 0x7fffffff}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200, 0x0) bind$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:47 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000300)=0x5) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0xf, @pix={0x5, 0x16d, 0x3436324d, 0x7, 0xa496, 0x10000, 0x3, 0x0, 0x1, 0x6, 0x0, 0x6}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x7ff}, &(0x7f00000000c0)=0x8) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/90) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x3b8, 0x4) 04:52:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b00000000000008000600000000000800050000000000"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r6, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0xb0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r13, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r12+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) [ 1056.880158] net_ratelimit: 14 callbacks suppressed [ 1056.880164] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.880219] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.963194] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.963246] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.963330] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.963367] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.963435] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.963473] protocol 88fb is buggy, dev hsr_slave_1 04:52:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r3) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r11) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r15 = geteuid() r16 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r14, @ANYBLOB="0200", @ANYRES32, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB, @ANYRES32=r16, @ANYBLOB, @ANYRES32, @ANYBLOB="421b98fea7d64d75970709f7a08c13859ebd7f27a101e229cb865f556504b6062e5f3875ce9a5e4066c5851eb2b39954430d275a2df140b5c396913a8892f1330fcc5586c0bfed73a4b0ca478e8c21e74325c2298abf00000100758666111f92e6055f43311c4001e2a5b9a93930fdda5a896a47170ea332394c757d160789be3530", @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="100001000000"], 0x11, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r17, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000140000003cfe0000ffb4dc0000"]) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setfsuid(r18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x57, 0x7d, 0x2, {{0x0, 0x42, 0x0, 0x3, {0x0, 0x7, 0x2}, 0x80000000, 0x401, 0xffffff0f, 0x6, 0x0, '', 0x7, 'user_id', 0x0, '', 0x8, 'group_id'}, 0x0, '', r13, r16, r18}}, 0x57) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fstat(r19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r23 = geteuid() r24 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r22, @ANYBLOB="0200", @ANYRES32, @ANYBLOB, @ANYRES32=r23, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB, @ANYRES32=r24, @ANYBLOB, @ANYRES32, @ANYBLOB="421b98fea7d64d75970709f7a08c13859ebd7f27a101e229cb865f556504b6062e5f3875ce9a5e4066c5851eb2b39954430d275a2df140b5c396913a8892f1330fcc5586c0bfed73a4b0ca478e8c21e74325c2298abf00000100758666111f92e6055f43311c4001e2a5b9a93930fdda5a896a47170ea332394c757d160789be3530", @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="100001000000"], 0x11, 0x0) r25 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r25, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000140000003cfe0000ffb4dc0000"]) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setfsuid(r26) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x57, 0x7d, 0x2, {{0x0, 0x42, 0x0, 0x3, {0x0, 0x7, 0x2}, 0x80000000, 0x401, 0xffffff0f, 0x6, 0x0, '', 0x7, 'user_id', 0x0, '', 0x8, 'group_id'}, 0x0, '', r21, r24, r26}}, 0x57) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x5}, [{0x2, 0x0, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}, {0x2, 0xcac46c47aae05e72, r6}, {0x2, 0x4, r7}, {0x2, 0x4, r9}, {0x2, 0x4, r11}, {0x2, 0x2, 0xee01}, {0x2, 0x5, r12}], {0x4, 0x7}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0xb, r16}, {0x8, 0x4, r20}, {0x8, 0x1, r24}], {0x10, 0x6}, {0x20, 0x2}}, 0x8c, 0x1) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, {}, {}, {0x0, 0x400000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}) 04:52:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x678, 0x0, 0xfffffffc, 0x0, 0x8, 0x2, {0x3, 0x0, 0x3}, {}, {}, {0x7fff}, 0x0, 0x104, 0xfff, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:48 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x1, 0x5, 0x2, 0x0, 0x1a}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 04:52:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x320, 0x0, 0x0, 0x8, 0x0, {0x2}, {0x2}, {0xffffffff, 0x0, 0x4}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$TIOCSIG(r1, 0x40045436, 0xc) 04:52:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000440)) 04:52:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r5, &(0x7f0000000040)=""/11, 0xb) r6 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) bind$nfc_llcp(r6, &(0x7f00000004c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x20, "35c9ce9ae467a80d1dbf5e2918344168aaa83933148db17e8f6454080cee8dff9fef9747554ab552357f4c16e82c7a60eff3055c5ec844202fecef97e749ea", 0x39}, 0x60) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000003e6d5ffd6a3615983cb138ef38e33c19695d13f56d9e268074ad0f9e3aee314e69f113d1447c007df84afc44f266eed5f30deef70838fdd1ea715f79da4d1ddb5dbcb9bbac5d1826f035b3a799a74eb4f8d8455601bb380d20b189c5a7636f7f38b1f3378cd9", @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf25050000000c00010008000b007369700008000600000000000800060000000000163372c06d52ddd47b42c0b57536880a00080005000000"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r8, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fadvise64(r1, 0x9f9, 0xac88, 0x3) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10000200000}, 0x0, &(0x7f0000000140)={0x1b4, 0xfc, 0x800, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 04:52:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x6acdf2848bcba181, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1057.893185] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1057.893215] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1057.929557] kobject: 'loop2' (ffff8880a4126d20): kobject_uevent_env [ 1057.929586] kobject: 'loop2' (ffff8880a4126d20): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1057.970379] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1057.970414] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1058.245863] kobject: 'loop1' (ffff8880a40ccca0): kobject_uevent_env [ 1058.245900] kobject: 'loop1' (ffff8880a40ccca0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1058.291808] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1058.291840] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1058.480635] kobject: 'loop4' (ffff8880a41aa560): kobject_uevent_env [ 1058.480655] kobject: 'loop4' (ffff8880a41aa560): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1058.565869] kobject: 'loop5' (ffff8880a41e65e0): kobject_uevent_env [ 1058.566065] kobject: 'loop5' (ffff8880a41e65e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1058.568681] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1058.568710] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1058.768857] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1058.768877] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1058.791446] kobject: 'loop2' (ffff8880a4126d20): kobject_uevent_env [ 1058.791478] kobject: 'loop2' (ffff8880a4126d20): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1058.960127] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.960183] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.115261] kobject: 'kvm' (ffff8880a6499690): kobject_uevent_env [ 1059.115291] kobject: 'kvm' (ffff8880a6499690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1059.231762] kobject: 'loop1' (ffff8880a40ccca0): kobject_uevent_env [ 1059.231797] kobject: 'loop1' (ffff8880a40ccca0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1059.313757] kobject: 'loop4' (ffff8880a41aa560): kobject_uevent_env [ 1059.313787] kobject: 'loop4' (ffff8880a41aa560): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1063.120119] net_ratelimit: 14 callbacks suppressed [ 1063.120123] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.120161] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.200114] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.200164] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.200236] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.200272] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.200353] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.200394] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.200153] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.200220] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.360182] net_ratelimit: 14 callbacks suppressed [ 1069.360186] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.360226] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.440178] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.440230] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.440314] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.440350] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.440425] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.440461] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.440167] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.440232] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.600131] net_ratelimit: 14 callbacks suppressed [ 1075.600136] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.600175] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.680105] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.680181] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.680254] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.680290] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.680370] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.680410] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.680128] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.680168] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.840148] net_ratelimit: 14 callbacks suppressed [ 1081.840169] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.840229] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.920145] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.920182] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.920241] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.920267] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.920322] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.920346] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.920169] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.920236] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.080192] net_ratelimit: 14 callbacks suppressed [ 1088.080212] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.080261] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.160159] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.160233] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.160308] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.160347] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.160437] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.160471] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.160180] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.160218] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.320114] net_ratelimit: 14 callbacks suppressed [ 1094.320118] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.320156] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.400130] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.400181] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.400262] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.400297] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.400371] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.400411] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.400161] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.400222] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.560248] net_ratelimit: 14 callbacks suppressed [ 1100.560272] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.560335] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.640118] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.640166] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.640235] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.640264] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.640324] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.640350] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.640106] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.640147] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.800113] net_ratelimit: 14 callbacks suppressed [ 1106.800118] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.800156] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.880179] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.880225] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.880303] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.880337] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.880409] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.880443] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.880112] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.880152] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.040176] net_ratelimit: 14 callbacks suppressed [ 1113.040200] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.040260] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.120110] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.120159] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.120217] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.120241] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.120298] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.120323] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.120168] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.120228] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.280117] net_ratelimit: 14 callbacks suppressed [ 1119.280121] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.280160] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.360125] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.360168] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.360248] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.360281] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.360346] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.360381] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.360127] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.360168] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.520126] net_ratelimit: 14 callbacks suppressed [ 1125.520131] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.520168] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.600101] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.600184] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.600255] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.600289] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.600367] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.600401] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.600156] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.600215] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.760120] net_ratelimit: 14 callbacks suppressed [ 1131.760125] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.760168] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.840180] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.840228] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.840307] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.840341] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.840406] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.840446] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.840162] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.840226] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.000126] net_ratelimit: 14 callbacks suppressed [ 1138.000130] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.000169] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.080165] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.080205] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.080258] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.080285] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.080349] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.080375] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.080147] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.080203] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.240185] net_ratelimit: 14 callbacks suppressed [ 1144.240189] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.240229] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.320166] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.320218] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.320297] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.320331] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.320397] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.320431] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.320176] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.320240] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.480243] net_ratelimit: 14 callbacks suppressed [ 1150.480268] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.480330] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.560112] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.560150] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.560205] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.560230] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.560289] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.560314] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.560119] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.560160] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.720149] net_ratelimit: 14 callbacks suppressed [ 1156.720173] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.720234] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.800128] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.800167] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.800226] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.800250] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.800301] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.800324] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.800161] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.800223] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.960127] net_ratelimit: 14 callbacks suppressed [ 1162.960131] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.960171] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.040165] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.040215] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.040286] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.040320] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.040401] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.040435] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.040209] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.040273] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.200129] net_ratelimit: 14 callbacks suppressed [ 1169.200133] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.200172] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.280112] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.280154] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.280240] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.280276] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.280350] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.280384] protocol 88fb is buggy, dev hsr_slave_1 [ 1171.280167] protocol 88fb is buggy, dev hsr_slave_0 [ 1171.280228] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.440129] net_ratelimit: 14 callbacks suppressed [ 1175.440134] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.440174] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.521196] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.521239] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.521309] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.521343] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.521424] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.521460] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.520118] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.520159] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.680106] net_ratelimit: 14 callbacks suppressed [ 1181.680110] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.680154] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.760132] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.760180] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.760262] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.760298] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.760366] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.760401] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.760109] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.760155] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.920140] net_ratelimit: 14 callbacks suppressed [ 1187.920145] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.920183] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.000170] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.000220] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.000302] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.000338] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.000422] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.000458] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.000123] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.000162] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.160154] net_ratelimit: 14 callbacks suppressed [ 1194.160177] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.160237] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.240117] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.240152] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.240210] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.240238] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.240286] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.240310] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.240130] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.240169] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.400177] net_ratelimit: 14 callbacks suppressed [ 1200.400200] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.400262] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.480107] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.480145] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.480200] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.480225] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.480283] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.480330] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.480123] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.480164] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.640152] net_ratelimit: 14 callbacks suppressed [ 1206.640173] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.640237] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.720113] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.720164] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.720221] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.720246] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.720295] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.720319] protocol 88fb is buggy, dev hsr_slave_1 [ 1208.720165] protocol 88fb is buggy, dev hsr_slave_0 [ 1208.720225] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.880205] net_ratelimit: 14 callbacks suppressed [ 1212.880229] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.880291] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.960117] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.960153] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.960206] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.960230] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.960292] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.960318] protocol 88fb is buggy, dev hsr_slave_1 [ 1214.960159] protocol 88fb is buggy, dev hsr_slave_0 [ 1214.960224] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.120185] net_ratelimit: 14 callbacks suppressed [ 1219.120209] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.120270] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.200192] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.200231] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.200294] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.200318] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.200367] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.200393] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.200123] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.200164] protocol 88fb is buggy, dev hsr_slave_1 [ 1225.360167] net_ratelimit: 14 callbacks suppressed [ 1225.360221] protocol 88fb is buggy, dev hsr_slave_0 [ 1225.360293] protocol 88fb is buggy, dev hsr_slave_1 [ 1225.440109] protocol 88fb is buggy, dev hsr_slave_0 [ 1225.440155] protocol 88fb is buggy, dev hsr_slave_1 [ 1225.440248] protocol 88fb is buggy, dev hsr_slave_0 [ 1225.440288] protocol 88fb is buggy, dev hsr_slave_1 [ 1225.440378] protocol 88fb is buggy, dev hsr_slave_0 [ 1225.440418] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.440122] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.440163] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.600149] net_ratelimit: 14 callbacks suppressed [ 1231.600155] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.600218] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.680115] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.680154] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.680212] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.680238] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.680286] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.680310] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.680171] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.680234] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.840158] net_ratelimit: 14 callbacks suppressed [ 1237.840180] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.840243] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.920131] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.920169] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.920224] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.920247] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.920312] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.920338] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.920150] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.920211] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.080200] net_ratelimit: 14 callbacks suppressed [ 1244.080205] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.080253] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.160144] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.160194] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.160274] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.160309] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.160373] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.160412] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.160221] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.160283] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.320161] net_ratelimit: 14 callbacks suppressed [ 1250.320184] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.320246] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.400108] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.400144] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.400198] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.400227] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.400285] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.400310] protocol 88fb is buggy, dev hsr_slave_1 [ 1252.400210] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.400271] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.560119] net_ratelimit: 14 callbacks suppressed [ 1256.560129] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.560167] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.640145] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.640202] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.640282] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.640316] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.640382] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.640416] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.640198] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.640259] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.800184] net_ratelimit: 14 callbacks suppressed [ 1262.800208] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.800273] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.880104] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.880140] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.880194] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.880220] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.880284] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.880309] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.880156] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.880219] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.040159] net_ratelimit: 14 callbacks suppressed [ 1269.040182] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.040251] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.120162] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.120260] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.120334] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.120360] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.120409] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.120434] protocol 88fb is buggy, dev hsr_slave_1 [ 1271.120156] protocol 88fb is buggy, dev hsr_slave_0 [ 1271.120195] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.280137] net_ratelimit: 14 callbacks suppressed [ 1275.280141] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.280177] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.360123] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.360209] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.360281] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.360315] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.360395] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.360428] protocol 88fb is buggy, dev hsr_slave_1 [ 1277.360151] protocol 88fb is buggy, dev hsr_slave_0 [ 1277.360213] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.520160] net_ratelimit: 14 callbacks suppressed [ 1281.520166] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.520228] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.600117] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.600155] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.600216] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.600242] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.600290] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.600314] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.600171] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.600232] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.760182] net_ratelimit: 14 callbacks suppressed [ 1287.760187] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.760225] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.840158] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.840210] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.840292] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.840326] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.840405] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.840439] protocol 88fb is buggy, dev hsr_slave_1 [ 1288.160311] INFO: task syz-executor.3:3574 blocked for more than 140 seconds. [ 1288.160320] Not tainted 4.14.158-syzkaller #0 [ 1288.160324] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.160330] syz-executor.3 D28528 3574 3025 0x00000004 [ 1288.160351] Call Trace: [ 1288.160376] __schedule+0x7b8/0x1cd0 [ 1288.160384] ? __mutex_lock+0x737/0x1470 [ 1288.160397] ? firmware_map_remove+0x196/0x196 [ 1288.160411] schedule+0x92/0x1c0 [ 1288.160421] schedule_preempt_disabled+0x13/0x20 [ 1288.160428] __mutex_lock+0x73c/0x1470 [ 1288.160442] ? fb_release+0x55/0x150 [ 1288.160455] ? mutex_trylock+0x1c0/0x1c0 [ 1288.160548] ? fsnotify+0x11e0/0x11e0 [ 1288.160559] ? unregister_framebuffer+0x40/0x40 [ 1288.160567] mutex_lock_nested+0x16/0x20 [ 1288.160575] ? mutex_lock_nested+0x16/0x20 [ 1288.160582] fb_release+0x55/0x150 [ 1288.160595] ? unregister_framebuffer+0x40/0x40 [ 1288.160605] __fput+0x275/0x7a0 [ 1288.160620] ____fput+0x16/0x20 [ 1288.160630] task_work_run+0x114/0x190 [ 1288.160646] exit_to_usermode_loop+0x1da/0x220 [ 1288.160659] do_syscall_64+0x4bc/0x640 [ 1288.160667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.160682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.160690] RIP: 0033:0x4143e1 [ 1288.160696] RSP: 002b:00007ffc94ffa7d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1288.160706] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004143e1 [ 1288.160712] RDX: 0000001b30c20000 RSI: 000000000000182f RDI: 0000000000000003 [ 1288.160717] RBP: 0000000000000001 R08: 00000000358b782f R09: 00000000358b7833 [ 1288.160723] R10: 00007ffc94ffa8b0 R11: 0000000000000293 R12: 000000000075c9a0 [ 1288.160728] R13: 000000000075c9a0 R14: 0000000000760e48 R15: 000000000075c07c [ 1288.160750] INFO: task syz-executor.0:3638 blocked for more than 140 seconds. [ 1288.160755] Not tainted 4.14.158-syzkaller #0 [ 1288.160759] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.160763] syz-executor.0 D28528 3638 3372 0x00000004 [ 1288.160781] Call Trace: [ 1288.160793] __schedule+0x7b8/0x1cd0 [ 1288.160800] ? __mutex_lock+0x737/0x1470 [ 1288.160814] ? firmware_map_remove+0x196/0x196 [ 1288.160827] schedule+0x92/0x1c0 [ 1288.160837] schedule_preempt_disabled+0x13/0x20 [ 1288.160844] __mutex_lock+0x73c/0x1470 [ 1288.160856] ? fb_open+0xb7/0x420 [ 1288.160865] ? mutex_trylock+0x1c0/0x1c0 [ 1288.160874] ? mutex_trylock+0x1c0/0x1c0 [ 1288.160886] ? __mutex_unlock_slowpath+0x71/0x800 [ 1288.160906] mutex_lock_nested+0x16/0x20 [ 1288.160914] ? mutex_lock_nested+0x16/0x20 [ 1288.160921] fb_open+0xb7/0x420 [ 1288.160931] ? get_fb_info.part.0+0x80/0x80 [ 1288.160939] chrdev_open+0x207/0x590 [ 1288.160950] ? cdev_put.part.0+0x50/0x50 [ 1288.160962] ? security_file_open+0x89/0x190 [ 1288.160975] do_dentry_open+0x73b/0xeb0 [ 1288.160986] ? cdev_put.part.0+0x50/0x50 [ 1288.161000] vfs_open+0x105/0x220 [ 1288.161012] path_openat+0x8bd/0x3f70 [ 1288.161020] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.161028] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1288.161038] ? finish_task_switch+0x178/0x650 [ 1288.161045] ? finish_task_switch+0x14d/0x650 [ 1288.161059] ? switch_mm_irqs_off+0x5e1/0xec0 [ 1288.161077] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1288.161085] ? __lock_is_held+0xb6/0x140 [ 1288.161095] ? save_trace+0x290/0x290 [ 1288.161108] ? __alloc_fd+0x1d4/0x4a0 [ 1288.161119] do_filp_open+0x18e/0x250 [ 1288.161126] ? __alloc_fd+0x1d4/0x4a0 [ 1288.161135] ? may_open_dev+0xe0/0xe0 [ 1288.161152] ? do_raw_spin_unlock+0x16b/0x260 [ 1288.161162] ? _raw_spin_unlock+0x2d/0x50 [ 1288.161170] ? __alloc_fd+0x1d4/0x4a0 [ 1288.161191] do_sys_open+0x2c5/0x430 [ 1288.161202] ? filp_open+0x70/0x70 [ 1288.161214] ? SyS_clock_gettime+0xf8/0x180 [ 1288.161227] SyS_openat+0x30/0x40 [ 1288.161234] ? SyS_open+0x40/0x40 [ 1288.161244] do_syscall_64+0x1e8/0x640 [ 1288.161252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.161266] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.161272] RIP: 0033:0x45a849 [ 1288.161277] RSP: 002b:00007fe364654c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1288.161286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a849 [ 1288.161292] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1288.161297] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1288.161302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3646556d4 [ 1288.161307] R13: 00000000004c7fc3 R14: 00000000004df180 R15: 00000000ffffffff [ 1288.161327] [ 1288.161327] Showing all locks held in the system: [ 1288.161340] 1 lock held by khungtaskd/1045: [ 1288.161345] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1288.161382] 1 lock held by rsyslogd/6901: [ 1288.161385] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 1288.161408] 2 locks held by getty/7024: [ 1288.161411] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161431] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161509] 2 locks held by getty/7025: [ 1288.161512] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161533] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161554] 2 locks held by getty/7026: [ 1288.161557] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161577] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161599] 2 locks held by getty/7027: [ 1288.161602] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161621] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161643] 2 locks held by getty/7028: [ 1288.161647] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161666] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161688] 2 locks held by getty/7029: [ 1288.161691] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161710] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161732] 2 locks held by getty/7030: [ 1288.161735] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1288.161755] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1288.161786] 1 lock held by syz-executor.3/3574: [ 1288.161789] #0: (&fb_info->lock){+.+.}, at: [] fb_release+0x55/0x150 [ 1288.161810] 1 lock held by syz-executor.0/3638: [ 1288.161813] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x420 [ 1288.161831] [ 1288.161835] ============================================= [ 1288.161835] [ 1288.161840] NMI backtrace for cpu 0 [ 1288.161849] CPU: 0 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 1288.161854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.161857] Call Trace: [ 1288.161867] dump_stack+0x142/0x197 [ 1288.161902] nmi_cpu_backtrace.cold+0x57/0x94 [ 1288.161914] ? irq_force_complete_move.cold+0x7d/0x7d [ 1288.161923] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1288.161935] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1288.161982] watchdog+0x5e7/0xb90 [ 1288.161999] kthread+0x319/0x430 [ 1288.162007] ? hungtask_pm_notify+0x50/0x50 [ 1288.162014] ? kthread_create_on_node+0xd0/0xd0 [ 1288.162024] ret_from_fork+0x24/0x30 [ 1288.162045] Sending NMI from CPU 0 to CPUs 1: [ 1288.162525] NMI backtrace for cpu 1 [ 1288.162530] CPU: 1 PID: 3635 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 1288.162534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.162536] task: ffff88807c98a080 task.stack: ffff88804cd30000 [ 1288.162539] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60 [ 1288.162541] RSP: 0018:ffff88804cd37260 EFLAGS: 00000246 [ 1288.162546] RAX: ffff88807c98a080 RBX: 0000000000000014 RCX: ffffc9000a035000 [ 1288.162549] RDX: 0000000000000001 RSI: ffffffff8328a5ac RDI: 0000000000000040 [ 1288.162558] RBP: ffff88804cd372a8 R08: 0000000000000500 R09: 0000000000000040 [ 1288.162561] R10: ffffed1014b8d6c3 R11: ffff8880a5c6b61f R12: ffff8880000a0080 [ 1288.162564] R13: 0000000000000000 R14: ffff8880000a0040 R15: 0000000000000000 [ 1288.162567] FS: 00007fe364676700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 1288.162570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1288.162573] CR2: 000000c43051ce40 CR3: 000000004c72b000 CR4: 00000000001406e0 [ 1288.162576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1288.162579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1288.162580] Call Trace: [ 1288.162583] ? bitfill_aligned+0xdc/0x190 [ 1288.162585] cfb_fillrect+0x3d0/0x720 [ 1288.162587] ? cfb_fillrect+0x720/0x720 [ 1288.162589] vga16fb_fillrect+0x618/0x1880 [ 1288.162591] ? memcpy+0x46/0x50 [ 1288.162593] bit_clear_margins+0x2d5/0x4f0 [ 1288.162595] ? bit_bmove+0x240/0x240 [ 1288.162597] ? efifb_probe.cold+0x1379/0x1379 [ 1288.162600] fbcon_clear_margins+0x292/0x320 [ 1288.162602] fbcon_switch+0xd38/0x1820 [ 1288.162604] ? fbcon_set_def_font+0x360/0x360 [ 1288.162606] ? fbcon_set_origin+0x21/0x50 [ 1288.162608] ? fbcon_scrolldelta+0x1100/0x1100 [ 1288.162611] ? set_origin+0x108/0x3c0 [ 1288.162613] redraw_screen+0x335/0x7c0 [ 1288.162615] ? con_flush_chars+0x90/0x90 [ 1288.162617] ? fbcon_set_palette+0x203/0x5b0 [ 1288.162619] fbcon_modechanged+0x59e/0x880 [ 1288.162622] fbcon_event_notify+0x11f/0x17af [ 1288.162624] ? lock_acquire+0x16f/0x430 [ 1288.162626] notifier_call_chain+0x111/0x1b0 [ 1288.162629] blocking_notifier_call_chain+0x80/0xa0 [ 1288.162631] fb_notifier_call_chain+0x25/0x30 [ 1288.162633] fb_set_var+0xb09/0xcf0 [ 1288.162635] ? fb_set_suspend+0x110/0x110 [ 1288.162638] ? lock_acquire+0x16f/0x430 [ 1288.162639] ? lock_fb_info+0x1f/0x80 [ 1288.162642] ? lock_fb_info+0x1f/0x80 [ 1288.162644] ? __mutex_lock+0x36a/0x1470 [ 1288.162646] ? trace_hardirqs_on+0x10/0x10 [ 1288.162648] ? mutex_trylock+0x1c0/0x1c0 [ 1288.162650] ? mutex_lock_nested+0x16/0x20 [ 1288.162653] ? mutex_lock_nested+0x16/0x20 [ 1288.162655] do_fb_ioctl+0x3cc/0x940 [ 1288.162656] ? fb_read+0x520/0x520 [ 1288.162659] ? avc_has_extended_perms+0x8ec/0xe40 [ 1288.162661] ? futex_wake+0x134/0x430 [ 1288.162662] ? avc_ss_reset+0x110/0x110 [ 1288.162665] ? __lock_acquire+0x5f7/0x4620 [ 1288.162667] ? trace_hardirqs_on+0x10/0x10 [ 1288.162669] ? __might_sleep+0x93/0xb0 [ 1288.162671] ? __fget+0x210/0x370 [ 1288.162673] fb_ioctl+0xe6/0x130 [ 1288.162675] ? do_fb_ioctl+0x940/0x940 [ 1288.162677] do_vfs_ioctl+0x7ae/0x1060 [ 1288.162679] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1288.162682] ? lock_downgrade+0x740/0x740 [ 1288.162684] ? ioctl_preallocate+0x1c0/0x1c0 [ 1288.162686] ? __fget+0x237/0x370 [ 1288.162688] ? security_file_ioctl+0x89/0xb0 [ 1288.162689] SyS_ioctl+0x8f/0xc0 [ 1288.162692] ? do_vfs_ioctl+0x1060/0x1060 [ 1288.162694] do_syscall_64+0x1e8/0x640 [ 1288.162696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.162698] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.162700] RIP: 0033:0x45a849 [ 1288.162702] RSP: 002b:00007fe364675c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.162708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a849 [ 1288.162711] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1288.162714] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1288.162717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3646766d4 [ 1288.162719] R13: 00000000004c3057 R14: 00000000004d8358 R15: 00000000ffffffff [ 1288.162721] Code: ff 65 48 8b 04 25 40 ee 01 00 48 85 c0 74 1a 65 8b 15 8b 9e a4 7e 81 e2 00 01 1f 00 75 0b 8b 90 50 13 00 00 83 fa 01 74 01 c3 55 <48> 89 e5 48 8b 75 08 48 8b 88 58 13 00 00 8b 80 54 13 00 00 48 [ 1288.163064] Kernel panic - not syncing: hung_task: blocked tasks [ 1288.163073] CPU: 0 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 1288.163077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.163080] Call Trace: [ 1288.163089] dump_stack+0x142/0x197 [ 1288.163101] panic+0x1f9/0x42d [ 1288.163109] ? add_taint.cold+0x16/0x16 [ 1288.163122] ? irq_force_complete_move.cold+0x7d/0x7d [ 1288.163136] watchdog+0x5f8/0xb90 [ 1288.163152] kthread+0x319/0x430 [ 1288.163160] ? hungtask_pm_notify+0x50/0x50 [ 1288.163167] ? kthread_create_on_node+0xd0/0xd0 [ 1288.163177] ret_from_fork+0x24/0x30 [ 1288.164919] Kernel Offset: disabled [ 1291.600415] Rebooting in 86400 seconds..