ffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 03:20:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000440)=0x2, 0x187) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)=""/152, 0x98) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:20:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x40030000000000, {0x5}}, 0x14}}, 0x0) 03:20:15 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8200, 0x0) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 03:20:15 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffefefff) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 451.700498] kauditd_printk_skb: 51 callbacks suppressed [ 451.700515] audit: type=1804 audit(1550978415.973:815): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/403/bus" dev="sda1" ino=16962 res=1 03:20:16 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x3dc, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ccd6c82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3a58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42b9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa71}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x859}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcaf}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x118, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53ccec8f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85b0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff801}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4010}, 0x400c800) lseek(r2, 0x0, 0x3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x28, r4, 0x600, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 451.809887] *** Guest State *** 03:20:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x100000000000000, {0x5}}, 0x14}}, 0x0) 03:20:16 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x2, 0x103) [ 451.830596] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 451.865758] audit: type=1804 audit(1550978415.973:816): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/403/bus" dev="sda1" ino=16962 res=1 [ 451.927032] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 451.964265] CR3 = 0x0000000000000000 [ 451.982083] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 451.990458] IPVS: ftp: loaded support on port[0] = 21 [ 452.003679] audit: type=1804 audit(1550978416.013:817): pid=23396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/403/bus" dev="sda1" ino=16962 res=1 03:20:16 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x80, 0x0) lseek(r2, 0x0, 0x3) 03:20:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x200000000000000, {0x5}}, 0x14}}, 0x0) 03:20:16 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x4e08175c, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="44cdfd8dcd3c72c18fb4f50ea3f6a299bceb6d3c48fbc130cff1bc2210f02c597ef197298cd189b5f16c529cc5a25b32232233ffd12bc8b97e647f339edbb3f63c933caa8e50da6b794d37c74684a28b7e5a91e593f861dd774128d66f2ab982b32582be2d460442b49f9c5c8782039b746c0519a9280dec4075ff689241ffc009bcbe81e35bb71097d24345d05083a44b832e8d9501182f48dac4539207953b05618e85d38f82ce39590bce895a58d87e787d8232ad0be0", 0xb8, 0x7f}, {&(0x7f0000000280)="3e63a22ad08d22df94901a1c40b7c953d2e14e0224deeed571b6ed85eafadb4f7704fae9af71b811057ec676db6a4074dca367141bade1268056a800c2161f186e70250d02455b43b30b097d505f8bba6a0c8a2605dc15b080a15e27aa325159c5c30f17ad62228f1db28348528511eda6e55228983ff4e7959f5f84d2ef0fd9ba5499383940e47ffea0f84084", 0x8d, 0x7}, {&(0x7f0000000340)="9d6bae580b58f7c269c5899e3c9e4bcf7f0523896b018e483d87fea662be332c74d6f298326b6a1d97a455daa2f2da27632b9bea42229a3699929893b7db13b0016abfeb327901325ce4f4c768adad7583144f78cb1bdfd68d644e9f63699fca", 0x60, 0x7}, {&(0x7f00000000c0)="68b9a62c3e16bebf352ae1e4b47951a058da8396d12b1b783b40bce7f702ecbaa553f560098b93bb6f", 0x29, 0x200}], 0xa084, &(0x7f0000000540)={[{@discard='discard'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@inline_data='inline_data'}, {@nobarrier='nobarrier'}, {@fsync_mode_strict='fsync_mode=strict'}], [{@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, 'user$'}}, {@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0xd}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@vmnet0ppp0eth1em0&#,*wlan1mime_type9-'}}, {@fowner_gt={'fowner>', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^#'}}, {@smackfshat={'smackfshat'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x3) [ 452.045345] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 452.070966] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 452.108710] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.159073] audit: type=1804 audit(1550978416.013:818): pid=23394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/396/bus" dev="sda1" ino=16981 res=1 [ 452.190970] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.226849] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.249193] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.271196] audit: type=1804 audit(1550978416.013:819): pid=23394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/396/bus" dev="sda1" ino=16981 res=1 [ 452.301983] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.321812] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.346606] GDTR: limit=0x00000000, base=0x0000000000000000 [ 452.397134] audit: type=1804 audit(1550978416.023:820): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/396/bus" dev="sda1" ino=16981 res=1 [ 452.434619] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.530045] IDTR: limit=0x00000000, base=0x0000000000000000 [ 452.591051] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.599997] audit: type=1804 audit(1550978416.233:821): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/397/bus" dev="sda1" ino=16839 res=1 [ 452.647384] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 452.663200] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 452.676541] Interruptibility = 00000000 ActivityState = 00000000 [ 452.685350] audit: type=1804 audit(1550978416.233:822): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/397/bus" dev="sda1" ino=16839 res=1 [ 452.718545] *** Host State *** [ 452.726436] RIP = 0xffffffff811b34c0 RSP = 0xffff88804ef478b8 [ 452.740354] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 452.755942] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 452.765094] audit: type=1804 audit(1550978416.233:823): pid=23413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/397/bus" dev="sda1" ino=16839 res=1 [ 452.802026] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 452.816081] CR0=0000000080050033 CR3=000000005a2da000 CR4=00000000001426f0 [ 452.833379] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 452.842461] audit: type=1804 audit(1550978416.243:824): pid=23410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/404/bus" dev="sda1" ino=17042 res=1 [ 452.880718] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 452.902580] *** Control State *** [ 452.914243] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 452.936586] EntryControls=0000d3ff ExitControls=002fefff [ 452.956253] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 452.980035] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 453.001346] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 453.022579] reason=80000021 qualification=0000000000000000 [ 453.044802] IDTVectoring: info=00000000 errcode=00000000 [ 453.062581] TSC Offset = 0xffffff0ba320b862 [ 453.082943] EPT pointer = 0x000000004db1b01e [ 454.714023] IPVS: ftp: loaded support on port[0] = 21 [ 454.747369] device bridge_slave_1 left promiscuous mode [ 454.753299] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.824865] device bridge_slave_0 left promiscuous mode [ 454.830410] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.965727] device hsr_slave_1 left promiscuous mode [ 455.008489] device hsr_slave_0 left promiscuous mode [ 455.068091] team0 (unregistering): Port device team_slave_1 removed [ 455.079301] team0 (unregistering): Port device team_slave_0 removed [ 455.090179] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 455.118966] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 455.191340] bond0 (unregistering): Released all slaves [ 455.342576] chnl_net:caif_netlink_parms(): no params data found [ 455.375543] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.382057] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.389393] device bridge_slave_0 entered promiscuous mode [ 455.396738] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.403285] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.410552] device bridge_slave_1 entered promiscuous mode [ 455.433562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 455.442997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 455.461988] team0: Port device team_slave_0 added [ 455.468601] team0: Port device team_slave_1 added [ 455.472906] net_ratelimit: 28 callbacks suppressed [ 455.472915] protocol 88fb is buggy, dev hsr_slave_0 [ 455.483530] protocol 88fb is buggy, dev hsr_slave_1 [ 455.555002] device hsr_slave_0 entered promiscuous mode [ 455.593268] device hsr_slave_1 entered promiscuous mode [ 455.878232] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.884774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.891398] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.897830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.929857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.942641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.950482] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.957895] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.988412] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.999516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.007896] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.014338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.034190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.041996] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.048455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.069730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.079917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.093353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.101488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.110546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.118897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.141753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.149437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 456.157638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.222855] protocol 88fb is buggy, dev hsr_slave_0 [ 456.228017] protocol 88fb is buggy, dev hsr_slave_1 [ 456.343287] protocol 88fb is buggy, dev hsr_slave_0 [ 456.348421] protocol 88fb is buggy, dev hsr_slave_1 [ 456.462880] protocol 88fb is buggy, dev hsr_slave_0 [ 456.468059] protocol 88fb is buggy, dev hsr_slave_1 [ 456.582882] protocol 88fb is buggy, dev hsr_slave_0 [ 456.588019] protocol 88fb is buggy, dev hsr_slave_1 03:20:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) kcmp(r3, r3, 0x3, r1, r2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:21 executing program 3: r0 = getpid() get_robust_list(r0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000040)}}, &(0x7f00000001c0)=0x18) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)="02", 0xffffff3f}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2000007) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) close(r3) lseek(r3, 0x0, 0x3) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000200)=0x3f) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000280)=0x20) 03:20:21 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffffe) lseek(r2, 0x0, 0x3) 03:20:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x300000000000000, {0x5}}, 0x14}}, 0x0) 03:20:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000440)=0x2, 0x187) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)=""/152, 0x98) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:20:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000780)={'nlmon0\x00', 0x2, 0x7f}) write$evdev(0xffffffffffffffff, 0x0, 0x0) flistxattr(r0, &(0x7f0000000240)=""/98, 0x62) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x104812, r0, 0x54) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0xffffff0c, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4, 0xfffffffffffffffd}}, 0x13) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x3}}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0x7ff, 0x3c6}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) accept4$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000002c0)=0x7) syslog(0x3, &(0x7f0000003200)=""/4096, 0x792e2f545f746cae) 03:20:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x400000000000000, {0x5}}, 0x14}}, 0x0) [ 457.201925] *** Guest State *** [ 457.217384] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 03:20:21 executing program 5: unshare(0x24020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children/%\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)={0x3e, {{0xa, 0x4e22, 0xa0, @rand_addr="7006ac6b551a98433067e74316215ab3", 0x1}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3d}}, {{0xa, 0x4e21, 0x10000, @mcast2, 0x8}}, {{0xa, 0x4e20, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, 0x4}}]}, 0x210) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x7, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) [ 457.253086] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 457.277888] CR3 = 0x0000000000000000 [ 457.306264] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 457.354245] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 457.383432] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:20:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x800000000000000, {0x5}}, 0x14}}, 0x0) [ 457.399069] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.438743] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.462680] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.497346] kauditd_printk_skb: 8 callbacks suppressed [ 457.497364] audit: type=1804 audit(1550978421.773:833): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/407/bus" dev="sda1" ino=17739 res=1 [ 457.498059] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x800) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000140)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x1) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) recvmsg(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000040)=[{0x0, 0x2ac}], 0x1}, 0x0) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 03:20:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0xa00000000000000, {0x5}}, 0x14}}, 0x0) [ 457.539997] audit: type=1804 audit(1550978421.813:834): pid=23491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/407/bus" dev="sda1" ino=17739 res=1 [ 457.586383] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:21 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$kcm(0x29, 0x7, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 457.621038] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.660566] audit: type=1804 audit(1550978421.853:835): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/407/bus" dev="sda1" ino=17739 res=1 [ 457.700810] GDTR: limit=0x00000000, base=0x0000000000000000 [ 457.719967] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.742270] IDTR: limit=0x00000000, base=0x0000000000000000 [ 457.747132] audit: type=1800 audit(1550978421.853:836): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17739 res=0 [ 457.761871] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.792065] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 457.806938] audit: type=1804 audit(1550978422.073:837): pid=23506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/408/bus" dev="sda1" ino=17748 res=1 [ 457.854727] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 457.877346] Interruptibility = 00000000 ActivityState = 00000000 [ 457.887362] audit: type=1804 audit(1550978422.073:838): pid=23503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/408/bus" dev="sda1" ino=17748 res=1 [ 457.895360] *** Host State *** [ 457.921355] audit: type=1804 audit(1550978422.083:839): pid=23506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/408/bus" dev="sda1" ino=17748 res=1 [ 457.951624] RIP = 0xffffffff811b34c0 RSP = 0xffff88804fc0f8b8 [ 457.958840] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 457.967920] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 457.976047] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 457.982215] CR0=0000000080050033 CR3=000000008c3cc000 CR4=00000000001426e0 [ 457.989569] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 457.996610] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 458.002976] *** Control State *** [ 458.006664] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 458.015561] EntryControls=0000d3ff ExitControls=002fefff [ 458.016798] audit: type=1804 audit(1550978422.293:840): pid=23472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/399/bus" dev="sda1" ino=17745 res=1 [ 458.021281] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 458.059382] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 458.071295] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:20:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000200)={0x7f800000000000, 0xd, 0x3, "a156f969b85a1103475bdd65eb4ba1b94b059cdffc105b8971c3dc5053df855fff3b14638a173a2ccbec4ddde077f9e87a19e1f659335d6deb752c57", 0x5, "25c3e6df422371f4c67d755a725c503cf57b6ed08da46d11b81d387686c6fa998b187061c6542ee4f0437a9af13b4b390a160f8af69373fef2fdb796", 0x10}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) [ 458.080381] reason=80000021 qualification=0000000000000000 [ 458.089547] audit: type=1804 audit(1550978422.333:841): pid=23479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/399/bus" dev="sda1" ino=17745 res=1 [ 458.092727] IDTVectoring: info=00000000 errcode=00000000 [ 458.148602] TSC Offset = 0xffffff08c0de76bf [ 458.180797] EPT pointer = 0x000000005460001e 03:20:22 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x8000000404, 0x7fff) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xff, 0x4) lseek(r2, 0x0, 0x3) 03:20:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0xe00000000000000, {0x5}}, 0x14}}, 0x0) 03:20:22 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r4 = getpid() write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x20, 0x37, 0x2, {0x2, 0x40, 0x1, r3, 0x2, '/$'}}, 0x20) kcmp(r3, r4, 0x4, r0, r0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) lseek(r5, 0x0, 0x3) 03:20:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000440)=0x2, 0x187) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:20:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0xf00000000000000, {0x5}}, 0x14}}, 0x0) [ 458.354695] audit: type=1804 audit(1550978422.633:842): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/409/bus" dev="sda1" ino=17748 res=1 03:20:22 executing program 5: r0 = memfd_create(&(0x7f0000000040)='}\x00', 0x1) sync_file_range(r0, 0x2, 0x80, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0xae22ae7dfbfcbd31, r2, 0x0) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r1, &(0x7f0000000180)='./bus\x00', 0x8840, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0xb3) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) lseek(r4, 0x0, 0x3) 03:20:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000440)=0x2, 0x187) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:20:22 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000000c0)) 03:20:22 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) splice(r1, 0x0, r0, 0x0, 0x3fc, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) lstat(0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:20:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x1000000000000000, {0x5}}, 0x14}}, 0x0) 03:20:22 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) unlinkat(r2, &(0x7f00000000c0)='./bus\x00', 0x200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x20, 0x4) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x8, 0x3, 0xffffffffffff9f76, 0x5, 0x3ff, 0x8}}, 0x8) lseek(r2, 0x0, 0x3) [ 458.737594] *** Guest State *** [ 458.740971] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 458.783172] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 458.792074] CR3 = 0x0000000000000000 [ 458.819357] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 458.842509] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 458.849618] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 458.858684] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.867514] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.876254] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.885106] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.893806] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.915701] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.928280] GDTR: limit=0x00000000, base=0x0000000000000000 [ 458.936891] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.945760] IDTR: limit=0x00000000, base=0x0000000000000000 [ 458.958698] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.967501] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 458.974535] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 458.982241] Interruptibility = 00000000 ActivityState = 00000000 [ 458.989442] *** Host State *** 03:20:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000480)="bc00a875ff7a6459af556284c1f4c8") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgid(0xffffffffffffffff) wait4(r3, &(0x7f0000000040), 0x1, &(0x7f0000000200)) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000004c0)=0x34f, 0x4) ptrace(0x10, r4) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000300)='fdinfo/4\x00') write$P9_RREAD(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="a000000075020095000000e995d804c17696c19fcd94edf3fbff661eb6093e503f5b2a2db68c25675fe08417e04de73beb76280d823b27aebf2befa800e120d6744c88da1010de22ccec7972c43e5f28e8fb09f8884ab09089938a02dab5d3f08ff59ab79c8d6c6999dfe6f16d736fc85f4a71cf096120d634bafd2c17d428ab1c7642bbe7efe3408b7b21edc6ed99cf441df0bc7d0808095dd80602c9e56b73"], 0xa0) write(r5, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r4, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) fcntl$notify(r1, 0x402, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) 03:20:23 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x2, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x7fff, &(0x7f0000000140)) 03:20:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x3f00000000000000, {0x5}}, 0x14}}, 0x0) 03:20:23 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x20b00, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 458.993018] RIP = 0xffffffff811b34c0 RSP = 0xffff88805393f8b8 [ 458.999292] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 459.007710] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 459.017691] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 459.056743] CR0=0000000080050033 CR3=000000009f4f1000 CR4=00000000001426e0 [ 459.087366] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 03:20:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 459.108980] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 459.126472] *** Control State *** [ 459.137209] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 03:20:23 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x7fff000000000000, "8eb034866c711bc06fbd237f20d5a29fa4385702b2d278272220b6461ff5fb87", 0x3, 0x1}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@v1={0x2, "8d104fed181ccdc0"}, 0x9, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x1, 0x100, 0x3, 0x3}, 0x5, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x7, 0xed, 0x8, 0x6}) fallocate(r1, 0x20, 0x0, 0xfffffeff000) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x5, 0xfff) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r2, 0x0, 0x3) 03:20:23 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x6}, 0x3ff}}, 0x18) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x27, 0xe4f, 0x80000000, 0x3, 0x1a, 0xfc, 0x100000001, 0x0, 0x5, 0x1, 0x103, 0x81}) [ 459.157509] EntryControls=0000d3ff ExitControls=002fefff [ 459.198775] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 459.237085] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.256173] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.273939] reason=80000021 qualification=0000000000000000 [ 459.286467] IDTVectoring: info=00000000 errcode=00000000 [ 459.298255] TSC Offset = 0xffffff07f060915c [ 459.305258] EPT pointer = 0x00000000536f801e 03:20:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:20:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x6000000000000000, {0x5}}, 0x14}}, 0x0) 03:20:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:23 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) 03:20:23 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x7}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000002c0)=0x4) r3 = open(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc, 0x40000000000008e) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') lseek(r3, 0x0, 0x3) [ 459.577460] *** Guest State *** [ 459.580806] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 459.591274] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 459.607269] CR3 = 0x0000000000000000 [ 459.612022] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 459.619968] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 459.630468] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 459.640276] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.648543] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.658701] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.666869] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.675831] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.684000] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.692027] GDTR: limit=0x00000000, base=0x0000000000000000 [ 459.700082] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.708361] IDTR: limit=0x00000000, base=0x0000000000000000 [ 459.716407] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 459.724451] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 459.730915] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 459.738492] Interruptibility = 00000000 ActivityState = 00000000 [ 459.744792] *** Host State *** [ 459.747993] RIP = 0xffffffff811b34c0 RSP = 0xffff88804b71f8b8 [ 459.754060] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 459.760480] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 459.768352] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 459.774318] CR0=0000000080050033 CR3=000000008bac4000 CR4=00000000001426e0 [ 459.781344] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 459.788077] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 459.794212] *** Control State *** [ 459.797706] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 459.804455] EntryControls=0000d3ff ExitControls=002fefff [ 459.809933] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 459.816963] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.823743] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 459.830353] reason=80000021 qualification=0000000000000000 [ 459.836792] IDTVectoring: info=00000000 errcode=00000000 [ 459.842253] TSC Offset = 0xffffff0779dd6c3c [ 459.846696] EPT pointer = 0x000000008430301e [ 460.752893] net_ratelimit: 26 callbacks suppressed [ 460.752903] protocol 88fb is buggy, dev hsr_slave_0 [ 460.763012] protocol 88fb is buggy, dev hsr_slave_1 [ 460.822905] protocol 88fb is buggy, dev hsr_slave_0 [ 460.828025] protocol 88fb is buggy, dev hsr_slave_1 [ 460.902922] protocol 88fb is buggy, dev hsr_slave_0 [ 460.908057] protocol 88fb is buggy, dev hsr_slave_1 [ 460.913239] protocol 88fb is buggy, dev hsr_slave_0 [ 460.918295] protocol 88fb is buggy, dev hsr_slave_1 [ 461.542939] protocol 88fb is buggy, dev hsr_slave_0 [ 461.542975] protocol 88fb is buggy, dev hsr_slave_1 03:20:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0xffffff7f00000000, {0x5}}, 0x14}}, 0x0) 03:20:26 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80800, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x3) 03:20:26 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="467a075beb04000900a6f8ff"], &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r1, 0x40}, 0x8) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000000c0)) lseek(r0, 0x0, 0x3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000080)) 03:20:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000580)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0xffffffff00000000, {0x5}}, 0x14}}, 0x0) [ 462.273928] *** Guest State *** [ 462.277332] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 462.292396] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 462.319675] CR3 = 0x0000000000000000 03:20:26 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x27, "d4125bc6b074e5bb56b426e812192f522cf2e308987b8cb38f3aa7b2497aec7351dcbc91d6a46b"}, &(0x7f0000000280)=0x2f) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000380)=0x926) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={r4, 0x7ff}, &(0x7f0000000300)=0x8) chown(&(0x7f0000000040)='./bus\x00', r2, r3) 03:20:26 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x2000000000000000, 0x80) lseek(r2, 0x0, 0x3) 03:20:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 462.323989] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 462.330760] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 462.363200] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 462.405691] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.433258] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 462.449689] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.465060] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r0) [ 462.503431] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.530235] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.551978] GDTR: limit=0x00000000, base=0x0000000000000000 [ 462.580508] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.600687] IDTR: limit=0x00000000, base=0x0000000000000000 [ 462.629234] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.647915] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 462.663133] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 462.671950] Interruptibility = 00000000 ActivityState = 00000000 [ 462.681125] *** Host State *** [ 462.685378] RIP = 0xffffffff811b34c0 RSP = 0xffff88804dc078b8 [ 462.691425] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 462.697941] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 462.705871] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 462.712291] CR0=0000000080050033 CR3=00000000838a2000 CR4=00000000001426e0 [ 462.719710] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 462.726464] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 462.732525] *** Control State *** [ 462.736227] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 462.743286] EntryControls=0000d3ff ExitControls=002fefff [ 462.748842] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 462.755954] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 462.762669] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 462.769353] reason=80000021 qualification=0000000000000000 [ 462.775800] IDTVectoring: info=00000000 errcode=00000000 [ 462.781257] TSC Offset = 0xffffff0608e56bc7 [ 462.785648] EPT pointer = 0x000000004c02801e 03:20:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x2, 0x0, 0x1f, 0x5, r2}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) r4 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x400080) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000200)={0x2, 0x0, [{}, {}]}) 03:20:27 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0xfffffffffffffffe, 0x100) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x100, 0x0) lseek(r1, 0x0, 0x3) 03:20:27 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x301040, 0x100000000000) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 03:20:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 03:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r0) 03:20:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r0) 03:20:27 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x3, 0x3) 03:20:27 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) lseek(r2, 0x0, 0x3) [ 463.219680] *** Guest State *** [ 463.242347] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 03:20:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) 03:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 463.283853] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 463.313183] CR3 = 0x0000000000000000 [ 463.317283] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 463.343061] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 463.355686] kauditd_printk_skb: 29 callbacks suppressed [ 463.355703] audit: type=1804 audit(1550978427.633:872): pid=23705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/418/bus" dev="sda1" ino=17757 res=1 [ 463.368031] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 463.462608] audit: type=1804 audit(1550978427.633:873): pid=23705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/418/bus" dev="sda1" ino=17757 res=1 [ 463.483015] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.501615] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.507824] audit: type=1804 audit(1550978427.673:874): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/418/bus" dev="sda1" ino=17757 res=1 [ 463.545438] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.546420] audit: type=1804 audit(1550978427.713:875): pid=23712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/408/bus" dev="sda1" ino=17779 res=1 [ 463.554180] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.587379] audit: type=1804 audit(1550978427.723:876): pid=23712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/408/bus" dev="sda1" ino=17779 res=1 [ 463.616115] audit: type=1804 audit(1550978427.733:877): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/408/bus" dev="sda1" ino=17779 res=1 [ 463.653449] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.661735] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.671350] GDTR: limit=0x00000000, base=0x0000000000000000 [ 463.679687] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.688110] IDTR: limit=0x00000000, base=0x0000000000000000 [ 463.696375] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 463.704577] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 463.711162] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 463.718801] Interruptibility = 00000000 ActivityState = 00000000 [ 463.725115] *** Host State *** [ 463.728333] RIP = 0xffffffff811b34c0 RSP = 0xffff88804e62f8b8 [ 463.734387] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 463.741067] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 463.748931] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 463.754890] CR0=0000000080050033 CR3=000000004e994000 CR4=00000000001426e0 [ 463.762039] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 463.768770] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 463.774891] *** Control State *** [ 463.778363] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 463.785631] EntryControls=0000d3ff ExitControls=002fefff [ 463.791171] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 463.798232] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 463.804948] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 463.811524] reason=80000021 qualification=0000000000000000 [ 463.817918] IDTVectoring: info=00000000 errcode=00000000 [ 463.823403] TSC Offset = 0xffffff0588221c26 [ 463.827733] EPT pointer = 0x000000005256201e [ 465.862857] net_ratelimit: 29 callbacks suppressed [ 465.862864] protocol 88fb is buggy, dev hsr_slave_0 [ 465.872949] protocol 88fb is buggy, dev hsr_slave_1 03:20:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\xbaPpp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc2\xe96\xddU\xa9=\xcdJx\xaa\xb43\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x907\xec&\xc9\xc4\x9bZ\xcdU.\x1f\x11+\"`\xa24\xad\x858\x1d\xa1\xd4\xf2\x05\\\xd5\xe5', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="a9c1546274e6fed940f4e4777924f1fe2067066573be3035871459ef558affb241f83719896b58adc2c79bcb8edc833b5a373520079ea39be4bc13064628866a1b606a1b49cf23856b99bf3d9b3f55724d4953c9c11f2da5525126a55b8e77ea616f6822ad0dced10407c7dd3458ab0e8d1dceb86db78c34b7ef852227ebf327a7c9f141d779759349668b9bc8685e7bec061c6146e58ca5d54e8f4533239b41ade5e3ffde2936a09db57f7436d45f952e9fb11684021dc8ddf34dea2db9edfad10ff8accbf58655e2", 0xc9}, {&(0x7f00000002c0)="ca38f876d24963ed3897593473e528507b62bbcc6163115d8400b4761c3c23cd0a9186e4a1501e862edeed626233e349f8240efd414378bf04410418e53dfc3f88f65ea051f372e5ec087000b4f5c7d5076ebfa89badd370ff53a522a3fb84224fa0fbcebba3b33446a1408059de3ede8676cb677ce5b3570ecd8b3c6a28d903c3c4308f737839711d12b48ef91f3693dbbad95d7a77a8ae6fdf6c15335559d2c496d687a66218de22277128815a694c9e29", 0xb2}, {&(0x7f0000000140)="4a1dee5be2d763687b123bb5cb8adf3751b6702868", 0x15}, {&(0x7f00000004c0)="fa5d5ddf829770582f0241f45f1e6d6ab455efd82d40900fde56a594a6172dde845664215264c4cd830553e3d93ec2b31575656c4aa21637c9810094de33347125c3fc12a899f1d23440e7641f16d9ff3e1fad12177985f537fa0ae2ca7a7be9dd81c6871cfb8c982461186ad858ff04d8086a10301135c705e25234c43a0ffe9246", 0x82}, {&(0x7f0000000180)="29da6f52380e3fba5d9e1fc521e935aaa26c2ed3ca7544f15801f889ca2a32fb33cab20d475199c96aa0d98200eea0fbdcfecf5ec729e2b4ee8ad980c9", 0x3d}, {&(0x7f0000000580)="8dda50c8dbad571cecf583dd97afb8cdb9fac480dd1c6da015f3298d45ae5cc4481780dd7ba24a7ad534f01d25f82921647a524b6b258cfe7dbb1f7c8259643c36a640a26dff3f4bedd3394237f99c34f5e4baabf9c361210470be9159b07d5017a2ff780103b262781b35", 0x6b}, {&(0x7f0000000600)="bccd61f1e19c3c730b700ef5b139379c5160714ae0290a597909717d9bfcc18b64712486f8ee9586ccf0c5ec278e8453d0ae58276bd836d834186a17316852b79ae6b1292c493ae61b87a135f352c23624fe2ae245bfb2ae47bb191dafbc4410f79ab3fc23d34070a598eed18348159c4bf17704d040314f76f968753e1b56d5bcb9e0d51bd094763087", 0x8a}, {&(0x7f00000006c0)="bcccf913aef81d41471ecc6be7ccd3c8d6c051cab70bdfcdc3adc7b6c81ca0eb4bb29f1e787555a897f0dc7012c3b8eeaeb0944f589204bb3311c2438afb2e122efbab6ef488e06005a379f3173be7e4f980451d94cbaa1e79148b11f4dae7f36fd513b376916f5c635969a3cd3738c518631e4753d7be041857232b248bfa769ef200b3dde8773cff8a9855e2d47671c475ec68dc3fa99c969932c1e2a9f477f85aa00efce17cb5fa2f8ae6ea5d2fa07d7e5c81113e6805c27dca7f4b46499c87cd7409ffaa7fad329d1ec0594a554a68b82e", 0xd3}, {&(0x7f00000007c0)="62abc6c0468c7af08a4373b857b9918b863063baa4", 0x15}, {&(0x7f0000000800)="ee0fa3f528b4c5776c3cca4a1319f0755253bfe1ddf1b74678f97de9ff4f888630a5db27dd2925e4bf23249a5390a5f6ca660f95628ff4927a3106d1ec8114673c660c35e849c1e5a328720c35cec914bb41b9d8e390822344120385ab8bae2ad4b1131d9ba64bf2583f272e862de1a21568", 0x72}], 0xa, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000940)="276ba7fee95ec48a1f8ee06d7055ef3980c609b8c161c50ac7c0e28f6b589c80baa19e00587b179b971b2218583ac2a7251797d29ef3f2f31dd9299e827f4c0995d87eafb5e236aff1f6d403e19c27aebe90acea5b1cc0fa2dfbad98b33de106c6302df7677beffe128a416bf18c1beaa5a88fce4ffc8e82050a8ff211f58bb61f394ffef78b8704ff1dc8de178474c6ea879454a89a7d93f7c6d60cece34573a37f2b8308a6bba5767cc3a3e072c234630587f1bd798267124bdc5408297fd5d3e10eaac3a687ab208cfc43f0b54d7176778570e5ea857ca981dac0c5b5e35ac2822f373e52d7988e949c70573e15a779b532b77cfe917d0c31", 0xfa}, {&(0x7f0000000a40)="34a05df3996df9b56bec29ff9891bb8a3cdf20c1dd33c49ed4a977293e0656c218ece015f0d9cd71af0f759f16187594268bae42fe2b9a2f6baa12460610abf8b83f6520182ed3ba83ed72393b6df448a1f96094a7cc5996a8520cc2a56d66723d008117625ee32220", 0x69}, {&(0x7f0000000ac0)="754f8456b856382af154b9f1dd1ae1fec56829e22d8ca682", 0x18}, {&(0x7f0000000b00)="45c1c0036f6de6ce9bad8b24e9e11bf9f36f84e2a40d1aaa5bcc7ea450d072f2844917fbf078d71474f1a5c33e23ca72cca52e8819807c6e228ea55f53245fd14608e23b969212f1b6b4f03f1c5f5cfe3506194002da1d87c9201908150634f85ff58e", 0x63}, {&(0x7f0000000b80)="46522d02802e6ddb73a4899212b876804be3e951bbffa6c93db9e721d9b85b36572e5f8d583ab0843f64c41c7a818b8f8c2336bb42b10d43f19a0005e0de6073ffebfaeb8bf916e4b9ed89b268e7582f983cb9a6291059cead566ee07e", 0x5d}, {&(0x7f0000000c00)="51030338e06eeb4dfad1e82331bb4ce9e6dc10bb9b20cb3ca5b5b85b33719ba313ddbb62768047211a1f44e82bfce4fb05bbdcf23810d9c8f1ac340979b1fd21ddc063a4d4b1bd19cd295738b4dedc980c694ee8b621fc6890d1db291e76d97911fb46827b3d35fdbbcd0f454345f79d108b5255f86bf36b1a32edbca341135beb6dfa3e784a07e3f3aecdd48ae745258523e7416a10796b5e548abc0a195dcbb8340b3ee7048faa5bdd92dc8986417c6a3235727524ad995f7c4b443788353a232c56ac851f042dbafb336a89ec04378b5f58df632b1bbf2e020b4bc79a0e87d27cd9842db92992b3d7858582", 0xed}, {&(0x7f0000000d00)="33c5a1de454d7c461bf83f604bf77cf5a0f07acf4ea3c58c852954005e8af9f88dbb38a395d4085947b03cd54c3153dda57119f0db5dfdff0044", 0x3a}, {&(0x7f0000000d40)="5dafa1f9d5f5a8428c7021ef8bcf545dcb12fd7099e168a07b0f05622017de1bbfb70eccd679a30af4caecec88ad45abed194a8c550b48484bc9c9c2277a2d36e01c46df83394604939f93e0ddee446a5cba46226744a88e235c48240c10079da2077b85cd9a87e5fa459347386f8ed8fa552bf421d0736654f1956451c30e9faf26787513018ae338d4019de027aad879fe1990de24da36b347780b2b217acd5109b1a846bafb0bd94463fe010316a5207e16294113481f7f8b78bd6309258bca752c0f9c9df28c42c05d8a13cc140027e7", 0xd2}], 0x8, &(0x7f0000000ec0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x24048004}], 0x2, 0x2404c090) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:30 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x4, @raw_data="2fae0a9b4ce4119ac99db8f979f03d62411ebf596d7a56906461572c98c27d29374d534edf0944a2202a428662ecff4466a81a1c11a7411cb8200de2dbb36e0a9112215aeba9ce2eb9771ea728a509f71475434062ca41e1c17f93ad4fb7619c98eada5128a6814d72637a7eeb097a5ae3bf575dc0f54de3ccff1ac07d226ea740a1190b00d65993aca6f1ada0bf01c91fcf5722ce19a278ac228996095654babc4e23457803034d81f3653ac1e58e91d968a1bb4f49b0c58e26e7873a92033737b7ec814ceca3cc"}) 03:20:30 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='eth1\x00') lseek(r2, 0x4, 0x3) 03:20:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) 03:20:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 466.191389] audit: type=1804 audit(1550978430.463:878): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/409/bus" dev="sda1" ino=17796 res=1 03:20:30 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xaee7, 0xff, 0x1, 0xffffffff80000000, 0x0, 0x3, 0x22020, 0xc, 0xd1e2, 0x4, 0x10001, 0x0, 0x3, 0x3, 0x2, 0x97, 0x8, 0xb0, 0x1, 0x1, 0x6, 0x53d, 0x10001, 0x3f, 0x20, 0xda, 0x5, 0x5, 0x10001, 0x6, 0x1, 0xfe4, 0x80, 0x8000, 0xfff, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xd6, 0x4}, 0x4000, 0xfff, 0x3, 0x1, 0x3ff, 0x3, 0x4}, r1, 0xd, r0, 0x8) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 03:20:30 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x800, "d09a54c255632a9af519c879575c92898135369e9dd2c4db7e2c29afe9b09626", 0x3, 0x800, 0x6, 0x800, 0x0, 0xa}) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) sendto(r1, &(0x7f0000000040)="447a7ee45b046a8ea836cff190c7b3943b21b52b461f37a3637e6a236f391e9dbd9f598b3b924b81baacf74e9ed60e3d0ce3c6e673bf3eb1d671b7aae0de723c220543adee16f614899fc4549cdbd2eca4da4ee45e659053dd604285f5103f2804042b385be15a0b004db5b705279b76d4bbc8eca68ae7d00dc61d6e94571eff62b30c66", 0x84, 0x20000000, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x80, 0x0) 03:20:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x3}}, 0x14}}, 0x0) 03:20:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 466.270198] audit: type=1804 audit(1550978430.463:879): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/409/bus" dev="sda1" ino=17796 res=1 [ 466.439865] audit: type=1804 audit(1550978430.483:880): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/409/bus" dev="sda1" ino=17796 res=1 03:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 466.480835] audit: type=1804 audit(1550978430.513:881): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/419/bus" dev="sda1" ino=17799 res=1 [ 466.982885] protocol 88fb is buggy, dev hsr_slave_0 [ 466.988000] protocol 88fb is buggy, dev hsr_slave_1 03:20:31 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r1, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:31 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x5, 0x1000, 0xfffffeff200) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000180)="b3d9c7045a5896b4a5d0dffd7a3bcef22d51fbc7c9b6958861f3990bd73989e1b332d1e623f94ce90b1789cae656ac2eb0a21eb285833c26f00079b37946fde68e9a847b8300fb62b68f2eb7c78ffa70249fce711ff4b14b3e68c33940685b5d3cb2d2baeb084d594cbe43921b8b998fa715292f0bbd05a4050cd1d4733d4414129c24a72d38a01ad42814cf1ce7491c22c8a82d86f63f7d252f82b6375380522d0afc2065b62d5c31257875bec143543d3c", 0xb2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x9, "29dabb7bf9e9322d2f39ad21427f389b79f7b6e6a88bf4ca63b955aebb98d3b9c3cc82f6cb7930a40311fc7da91fb8a7b0209bbc2e7ff5c3d3e0262b3040bbfe0999c19a8ea66841b438b81b164798dbb2f7bdc36a658d3173598cf4723e21f95e1e7270ef49514014a4aa77cfa9d8d6857a6ff3f1c80632c64a38a2636b974164c3073f3409b1bae4117529552b36d79e057e4575bd49835db8a6fb6b3603caf208fb02f77d359bcc725b25fd4d40294036ffbd6c2ae7a998cea25c0c3a2c2fde3154a16a24266777c516d70edb997b6cbbb908ede3d3a493cd25250e8ca15e0f6487deb26332f5ca3abff8100e72de8b9138f82925d9e221eac2a61d8c3503", 0xa, 0xff, 0xc, 0x9, 0x489, 0x101, 0x4}, r1}}, 0x128) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, [], 0x27}, 0x7fffffff}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) lseek(r4, 0x0, 0x3) 03:20:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x4}}, 0x14}}, 0x0) 03:20:31 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="90f8537c167a3857be57920c736b", 0x0}, 0x28) 03:20:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 467.062907] protocol 88fb is buggy, dev hsr_slave_0 [ 467.068043] protocol 88fb is buggy, dev hsr_slave_1 [ 467.142842] protocol 88fb is buggy, dev hsr_slave_0 [ 467.147979] protocol 88fb is buggy, dev hsr_slave_1 [ 467.153164] protocol 88fb is buggy, dev hsr_slave_0 [ 467.153202] protocol 88fb is buggy, dev hsr_slave_1 03:20:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:31 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141045, 0x1) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x6001}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x800, 0x0) 03:20:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x8}}, 0x14}}, 0x0) [ 467.201493] *** Guest State *** [ 467.216821] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 467.284053] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 467.322932] CR3 = 0x0000000000000000 03:20:31 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="be"], 0x1}}, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x108, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010) [ 467.332499] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 467.350113] RFLAGS=0x00000002 DR7 = 0x0000000000000400 03:20:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) [ 467.378300] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:20:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xa}}, 0x14}}, 0x0) [ 467.422885] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.430953] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.485255] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.507594] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.531176] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.567943] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.592601] GDTR: limit=0x00000000, base=0x0000000000000000 [ 467.633236] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.644905] IDTR: limit=0x00000000, base=0x0000000000000000 [ 467.653307] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.666156] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 467.677867] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 467.687572] Interruptibility = 00000000 ActivityState = 00000000 [ 467.699221] *** Host State *** [ 467.702715] RIP = 0xffffffff811b34c0 RSP = 0xffff888051acf8b8 [ 467.719074] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 467.727010] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 467.741030] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 467.748550] CR0=0000000080050033 CR3=0000000049833000 CR4=00000000001426f0 [ 467.761763] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 467.769911] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 467.782073] *** Control State *** [ 467.788531] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 467.801541] EntryControls=0000d3ff ExitControls=002fefff [ 467.808280] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 467.821418] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 467.829568] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 467.842252] reason=80000021 qualification=0000000000000000 [ 467.850021] IDTVectoring: info=00000000 errcode=00000000 [ 467.861536] TSC Offset = 0xffffff0363de29ae [ 467.868295] EPT pointer = 0x000000004f1fd01e 03:20:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000180)=0x7f, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:32 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="be"], 0x1}}, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x108, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010) 03:20:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 03:20:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xe}}, 0x14}}, 0x0) 03:20:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:32 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="be"], 0x1}}, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x108, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010) 03:20:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xf}}, 0x14}}, 0x0) [ 468.177894] *** Guest State *** [ 468.181394] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 468.191011] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 468.200715] CR3 = 0x0000000000000000 [ 468.205063] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 468.212129] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 468.218509] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 468.258334] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.286641] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.318772] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.332961] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.348133] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.356751] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.365309] GDTR: limit=0x00000000, base=0x0000000000000000 [ 468.373833] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.382074] IDTR: limit=0x00000000, base=0x0000000000000000 [ 468.390722] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.399229] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 468.406084] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 468.414008] Interruptibility = 00000000 ActivityState = 00000000 [ 468.420480] *** Host State *** [ 468.424906] RIP = 0xffffffff811b34c0 RSP = 0xffff8880526bf8b8 [ 468.431076] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 468.437996] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 468.446286] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 468.452363] CR0=0000000080050033 CR3=0000000093d93000 CR4=00000000001426e0 [ 468.460883] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 468.468006] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 468.474478] *** Control State *** [ 468.478099] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 468.485287] EntryControls=0000d3ff ExitControls=002fefff [ 468.490930] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 468.498423] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 468.505564] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 468.512325] reason=80000021 qualification=0000000000000000 [ 468.519219] IDTVectoring: info=00000000 errcode=00000000 [ 468.527027] TSC Offset = 0xffffff02dcf17784 [ 468.542245] EPT pointer = 0x0000000055e7c01e 03:20:34 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0xdada}, @val={0x1, 0x80, 0x0, 0x3ff, 0x7, 0x401}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @mcast2, @broadcast, @rand_addr="add4b2693ee825be19689069cbc3d0de"}}, 0x42) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 03:20:34 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="be"], 0x1}}, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x108, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010) 03:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 03:20:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x10}}, 0x14}}, 0x0) 03:20:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:20:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20001, 0x20) write$tun(r2, &(0x7f0000000280)={@void, @val={0x1, 0x7, 0x0, 0x768, 0x100000000, 0x1}, @mpls={[{0x4, 0x4, 0x2, 0x4}, {0x3, 0xa19, 0x7f, 0x1}, {0x719, 0x7f, 0x5, 0x2}, {0x8, 0x7e, 0x9, 0x3ff}], @llc={@llc={0xe0, 0xfc, "b4f9", "3f86cfe5b1d26021a0c13ac44a74a42d194f8874faaaf81053d57c71408dec04661488b409dc550b4f727d041943283c376da445827923e5534cc859e368fbf8c86d4e6f0c38314971aa90bbb58c7d63028f019b6ae41b1285ff20b7a08b52d35e2c7eaae16eb1c2a1be08bbad039a1066ac166dbdf190c7aa163a77e98cc340a372436ebb018667c35c32c3b92a692e8ba6036f825aae8953163a240a83e9d34b2e503b9056bfc364610b4162a5bd"}}}}, 0xfffffffffffffde5) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) [ 470.306028] kauditd_printk_skb: 14 callbacks suppressed [ 470.306044] audit: type=1800 audit(1550978434.583:896): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17803 res=0 [ 470.333373] audit: type=1800 audit(1550978434.583:897): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17803 res=0 03:20:34 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x60}}, 0x14}}, 0x0) [ 470.454398] *** Guest State *** [ 470.464071] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 03:20:34 executing program 3: open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) [ 470.500600] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 470.552268] CR3 = 0x0000000000000000 [ 470.565885] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 470.579500] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 470.594535] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:20:34 executing program 1: r0 = socket$inet(0x2, 0x0, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 470.613375] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.617367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 470.630041] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x300}}, 0x14}}, 0x0) [ 470.664232] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.690744] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.714094] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.743034] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:35 executing program 1: r0 = socket$inet(0x2, 0x0, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 470.771310] GDTR: limit=0x00000000, base=0x0000000000000000 [ 470.803246] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.840116] IDTR: limit=0x00000000, base=0x0000000000000000 [ 470.872430] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.895619] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 470.918746] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 470.949880] Interruptibility = 00000000 ActivityState = 00000000 [ 470.963797] *** Host State *** [ 470.967247] RIP = 0xffffffff811b34c0 RSP = 0xffff8880a65c78b8 [ 470.991898] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 471.005442] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 471.013993] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 471.020106] CR0=0000000080050033 CR3=00000000969ae000 CR4=00000000001426e0 [ 471.027882] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 471.038928] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 471.050781] *** Control State *** [ 471.054752] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 471.061613] EntryControls=0000d3ff ExitControls=002fefff [ 471.067615] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 471.075047] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 471.081910] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 471.089424] reason=80000021 qualification=0000000000000000 [ 471.096229] IDTVectoring: info=00000000 errcode=00000000 [ 471.101857] TSC Offset = 0xffffff01a5dabc1f [ 471.108029] EPT pointer = 0x00000000959bc01e [ 471.142859] net_ratelimit: 20 callbacks suppressed [ 471.142869] protocol 88fb is buggy, dev hsr_slave_0 [ 471.153056] protocol 88fb is buggy, dev hsr_slave_1 [ 471.222917] protocol 88fb is buggy, dev hsr_slave_0 [ 471.228062] protocol 88fb is buggy, dev hsr_slave_1 [ 471.312894] protocol 88fb is buggy, dev hsr_slave_0 [ 471.318020] protocol 88fb is buggy, dev hsr_slave_1 [ 471.323196] protocol 88fb is buggy, dev hsr_slave_0 [ 471.328258] protocol 88fb is buggy, dev hsr_slave_1 [ 471.384312] audit: type=1804 audit(1550978435.653:898): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/423/bus" dev="sda1" ino=17812 res=1 03:20:35 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 03:20:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xa00}}, 0x14}}, 0x0) 03:20:35 executing program 1: r0 = socket$inet(0x2, 0x0, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:35 executing program 3: open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 03:20:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) [ 471.411365] audit: type=1804 audit(1550978435.663:899): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/423/bus" dev="sda1" ino=17812 res=1 [ 471.439551] audit: type=1804 audit(1550978435.663:900): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/423/bus" dev="sda1" ino=17812 res=1 03:20:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xe00}}, 0x14}}, 0x0) 03:20:35 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 471.583577] *** Guest State *** [ 471.598074] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 471.638608] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 471.654410] audit: type=1804 audit(1550978435.933:901): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/424/bus" dev="sda1" ino=17844 res=1 03:20:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x1, 0x40, 0x7fff, 0x0, 0x0, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, &(0x7f0000000d00)={{0x7, 0x0, 0x82, 0xffffffff}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\x00', 0xfffffffffffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x4}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000f40)=ANY=[@ANYRES32=r5, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRES64=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x8000e, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mount(&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x5010, 0x0) write$input_event(r3, &(0x7f0000000340)={{0x0, 0x2710}, 0x15, 0x7}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_out(r5, 0x2000005460, &(0x7f0000001080)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000280)='net/softnet_stat\x00') unshare(0x40000000) [ 471.693129] CR3 = 0x0000000000000000 [ 471.697723] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 471.728221] RFLAGS=0x00000002 DR7 = 0x0000000000000400 03:20:36 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0x29}, 'batadv0\x00'}}) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x9, 0xf4, 0x3, 0x5, 0x8}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 471.740343] audit: type=1804 audit(1550978435.963:902): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/424/bus" dev="sda1" ino=17844 res=1 03:20:36 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xf00}}, 0x14}}, 0x0) [ 471.814862] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 471.825846] audit: type=1804 audit(1550978435.963:903): pid=23921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/424/bus" dev="sda1" ino=17844 res=1 [ 471.849200] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 471.912955] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 471.939628] input: syz1 as /devices/virtual/input/input5 [ 471.942905] protocol 88fb is buggy, dev hsr_slave_0 [ 471.946208] protocol 88fb is buggy, dev hsr_slave_0 [ 471.966067] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 471.968205] audit: type=1804 audit(1550978436.243:904): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/425/bus" dev="sda1" ino=17812 res=1 [ 472.012473] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.021800] audit: type=1804 audit(1550978436.243:905): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/425/bus" dev="sda1" ino=17812 res=1 [ 472.053632] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.055002] IPVS: ftp: loaded support on port[0] = 21 03:20:36 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:36 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xe8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x8f46, 0x7fffffff}, 0x8) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 03:20:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x3f00}}, 0x14}}, 0x0) [ 472.079266] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.136109] GDTR: limit=0x00000000, base=0x0000000000000000 [ 472.166307] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:36 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 472.203577] IDTR: limit=0x00000000, base=0x0000000000000000 [ 472.220823] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.230692] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 472.237893] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 472.247284] Interruptibility = 00000000 ActivityState = 00000000 [ 472.261929] *** Host State *** [ 472.268974] RIP = 0xffffffff811b34c0 RSP = 0xffff88804dda78b8 [ 472.301667] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 472.352089] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 472.383985] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 472.398074] CR0=0000000080050033 CR3=00000000a60c6000 CR4=00000000001426f0 [ 472.417367] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 472.426065] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 472.432263] *** Control State *** [ 472.443410] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 472.462956] EntryControls=0000d3ff ExitControls=002fefff [ 472.468572] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 472.468583] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 472.468593] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 472.468601] reason=80000021 qualification=0000000000000000 [ 472.468609] IDTVectoring: info=00000000 errcode=00000000 03:20:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x6000}}, 0x14}}, 0x0) 03:20:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x258040, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x101, 0x0) write$P9_RLOCK(r3, &(0x7f0000000280)={0x163, 0x35, 0x2}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:36 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffffffffffff9, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xffffffff}, &(0x7f0000000180)=0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) [ 472.468616] TSC Offset = 0xffffff010b377171 [ 472.468625] EPT pointer = 0x00000000a4a5c01e [ 472.540117] input: syz1 as /devices/virtual/input/input6 [ 472.591949] IPVS: ftp: loaded support on port[0] = 21 [ 472.665232] *** Guest State *** [ 472.668573] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 472.694522] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 472.703487] CR3 = 0x0000000000000000 [ 472.703509] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 472.703523] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 472.703540] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 472.703558] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.745131] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.753718] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.761846] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.782653] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.791752] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.799917] GDTR: limit=0x00000000, base=0x0000000000000000 [ 472.799937] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.799950] IDTR: limit=0x00000000, base=0x0000000000000000 [ 472.816469] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.833066] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 472.847650] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 472.856369] Interruptibility = 00000000 ActivityState = 00000000 [ 472.862709] *** Host State *** [ 472.873060] RIP = 0xffffffff811b34c0 RSP = 0xffff88804fc6f8b8 [ 472.880124] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 472.886997] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 472.898459] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 472.908732] CR0=0000000080050033 CR3=000000004c2e6000 CR4=00000000001426f0 03:20:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffdd9, 0x80080002000000b, &(0x7f0000000080)={0xa, 0x2000000006bb, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') 03:20:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x34000}}, 0x14}}, 0x0) 03:20:37 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000002040)={0x3, 0x0, 0x2080, {0x115000}, [], "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", "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 472.921195] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 472.943952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 472.951865] *** Control State *** [ 472.955679] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 472.962636] EntryControls=0000d3ff ExitControls=002fefff [ 472.974175] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:20:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 473.000127] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 473.015125] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 473.039698] reason=80000021 qualification=0000000000000000 03:20:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x400300}}, 0x14}}, 0x0) 03:20:37 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 473.053246] IDTVectoring: info=00000000 errcode=00000000 [ 473.060116] TSC Offset = 0xffffff0078996e39 [ 473.078295] EPT pointer = 0x000000009510401e 03:20:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200)) 03:20:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 473.334958] *** Guest State *** [ 473.338312] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 473.361825] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 03:20:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000540)="0adc1f123c123f3188b0707f79c11b6d7a40494274b45aa5419ba54541451405fa490b2fa066f2b9984cef0dacd7ebd504662e648fb0b8f9b2fae283b4d5819b5cf5c3d551f91bcd0fcb6abff4e1733043cb6903203a83c9f50ee96e867a9a3aed289f207c126a7af2d0c37fbc313f07d56e3cb8c32d3c49823f5938e866f8664a") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000200)={{0x3, @netrom}, [@rose, @remote, @remote, @rose, @remote, @null, @bcast, @rose]}, &(0x7f0000000280)=0x48) ioctl$FICLONE(r0, 0x40049409, r3) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfff, 0x200) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000002c0)={0x400, 0xffff, 0x200020000000, 0x0, 0x7}) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000004, 0x41010, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180)=0xeb26, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) 03:20:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x1000000}}, 0x14}}, 0x0) 03:20:37 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x2c, 0x3, 0x0, {0x1, 0xb, 0x0, '*!(vboxnet1'}}, 0x2c) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 03:20:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:37 executing program 3: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet_mreq(r1, 0x0, 0x24, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 473.384097] CR3 = 0x0000000000000000 [ 473.387883] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 473.398357] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 473.410069] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 473.472984] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.488421] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x2000000}}, 0x14}}, 0x0) 03:20:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:37 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) setsockopt$inet_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000040), 0x0) [ 473.518511] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.555338] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.583094] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.618036] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:20:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) dup2(r0, r2) dup3(r2, r1, 0x0) [ 473.652681] GDTR: limit=0x00000000, base=0x0000000000000000 03:20:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 473.697225] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.749880] IDTR: limit=0x00000000, base=0x0000000000000000 [ 473.780505] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.812919] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 473.821877] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 473.913016] Interruptibility = 00000000 ActivityState = 00000000 [ 473.921112] *** Host State *** [ 473.929106] RIP = 0xffffffff811b34c0 RSP = 0xffff8880544e78b8 [ 473.942047] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 473.956793] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 473.973835] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 473.986697] CR0=0000000080050033 CR3=000000007e4c6000 CR4=00000000001426e0 [ 474.001771] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 474.016672] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 474.024756] *** Control State *** [ 474.042079] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 474.049295] EntryControls=0000d3ff ExitControls=002fefff [ 474.066737] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 474.076943] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.088098] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.097738] reason=80000021 qualification=0000000000000000 03:20:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x200, 0xffffffffffffff58, 0xff, 'queue1\x00', 0xffff}) sendto(r1, &(0x7f0000000800)="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", 0x1000, 0x40010, &(0x7f0000001800)=@vsock={0x28, 0x0, 0x2711}, 0x80) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) accept4$ax25(r3, 0x0, &(0x7f0000000780), 0x800) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000180)='ppp0^posix_acl_access[em0*eth1cgrouptrusted}vboxnet1eth0selinux\x00', &(0x7f0000000200)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', &(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f00000003c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', &(0x7f0000000440)='\\(.$\x00', &(0x7f0000000480)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', &(0x7f0000000500)='cgroup\x00'], &(0x7f0000000640)=[&(0x7f00000005c0)='.[md5sum\\}*vmnet0.\x00', &(0x7f0000000600)='-]em1(\x00']) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000007c0)={0xa0c, 0x0, 0x56f9, 0xffffffff, 0xb7d}) 03:20:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x3000000}}, 0x14}}, 0x0) 03:20:38 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8000, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x101, 0x1, 0x2e}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 03:20:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:38 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 474.113000] IDTVectoring: info=00000000 errcode=00000000 [ 474.118498] TSC Offset = 0xffffff001ac3f50b [ 474.123355] EPT pointer = 0x000000004fd5001e 03:20:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x4000000}}, 0x14}}, 0x0) 03:20:38 executing program 3: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = dup(r0) write$P9_RGETATTR(r1, 0x0, 0x0) 03:20:38 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x9c) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 474.304622] *** Guest State *** [ 474.308102] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 474.347058] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 03:20:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 474.419107] CR3 = 0x0000000000000000 [ 474.436411] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 03:20:38 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 474.460186] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 474.513371] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 474.576418] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.589569] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.603965] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.620807] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.651969] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.678781] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.697741] GDTR: limit=0x00000000, base=0x0000000000000000 [ 474.706566] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.715204] IDTR: limit=0x00000000, base=0x0000000000000000 [ 474.724168] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.732386] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 474.740304] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 474.748406] Interruptibility = 00000000 ActivityState = 00000000 [ 474.755182] *** Host State *** [ 474.758544] RIP = 0xffffffff811b34c0 RSP = 0xffff888095ae78b8 [ 474.765101] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 474.771708] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 474.780110] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 474.786529] CR0=0000000080050033 CR3=000000008f81e000 CR4=00000000001426f0 [ 474.794046] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 474.800922] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 474.807591] *** Control State *** [ 474.811237] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 474.818468] EntryControls=0000d3ff ExitControls=002fefff [ 474.824471] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 474.831853] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.839084] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.846202] reason=80000021 qualification=0000000000000000 [ 474.852701] IDTVectoring: info=00000000 errcode=00000000 [ 474.858711] TSC Offset = 0xfffffeff96f4658e [ 474.864454] EPT pointer = 0x000000004e8e201e [ 476.262889] net_ratelimit: 30 callbacks suppressed [ 476.262899] protocol 88fb is buggy, dev hsr_slave_0 [ 476.273027] protocol 88fb is buggy, dev hsr_slave_1 03:20:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x610002, 0x1) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0xad1a) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x13, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x8000000}}, 0x14}}, 0x0) 03:20:41 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x3) 03:20:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:41 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000000c0)) 03:20:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xa000000}}, 0x14}}, 0x0) [ 477.271555] kauditd_printk_skb: 24 callbacks suppressed [ 477.271573] audit: type=1804 audit(1550978441.543:930): pid=24117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/434/bus" dev="sda1" ino=16977 res=1 03:20:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) kcmp(r3, r3, 0x3, r1, r2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:41 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 477.355980] audit: type=1804 audit(1550978441.583:931): pid=24117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/434/bus" dev="sda1" ino=16977 res=1 [ 477.382887] protocol 88fb is buggy, dev hsr_slave_0 [ 477.388000] protocol 88fb is buggy, dev hsr_slave_1 [ 477.462895] protocol 88fb is buggy, dev hsr_slave_0 [ 477.468107] protocol 88fb is buggy, dev hsr_slave_1 03:20:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 477.499170] audit: type=1804 audit(1550978441.593:932): pid=24126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/434/bus" dev="sda1" ino=16977 res=1 [ 477.542880] protocol 88fb is buggy, dev hsr_slave_0 [ 477.548046] protocol 88fb is buggy, dev hsr_slave_1 [ 477.553241] protocol 88fb is buggy, dev hsr_slave_0 [ 477.558326] protocol 88fb is buggy, dev hsr_slave_1 [ 477.561023] audit: type=1804 audit(1550978441.593:933): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir066027979/syzkaller.01YeCJ/426/bus" dev="sda1" ino=16994 res=1 [ 477.598000] audit: type=1804 audit(1550978441.773:934): pid=24142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/435/bus" dev="sda1" ino=17057 res=1 [ 477.676625] audit: type=1804 audit(1550978441.773:935): pid=24142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/435/bus" dev="sda1" ino=17057 res=1 [ 477.703785] audit: type=1804 audit(1550978441.813:936): pid=24142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/435/bus" dev="sda1" ino=17057 res=1 03:20:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000d00f0500e7c26042b5b0592bb918c8fb5f3738a0be7a04605d7df529757316c2a7fd517ab04a2aeedaf296298896428b3c12774abef0c742a8ec90fd7e4d9c3a62cf1715db712a75d9bbf4e8dcdb9d3168385ea4a8a9e45485bd4054b9fc0914b0c41ab27583d18b90a22c957d8331f9ecddea2153fa808aa8ba674fc490e8cef63e31b077098fef1c7b01dccd1c6c6c8101eb7cec12bde9e68cae0f6e148379f2e955bd82a05a"], &(0x7f0000000200)=0x8) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000480)={0x0, 0x4}, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) getpeername$netrom(r2, &(0x7f0000000300)={{0x3, @null}, [@rose, @null, @default, @netrom, @bcast, @netrom, @null]}, &(0x7f00000003c0)=0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x8, 0x1) ptrace$getsig(0x4202, r3, 0x7, &(0x7f0000000400)) 03:20:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:42 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x3) 03:20:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xe000000}}, 0x14}}, 0x0) 03:20:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xf000000}}, 0x14}}, 0x0) 03:20:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:20:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) kcmp(r3, r3, 0x3, r1, r2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 478.208668] audit: type=1804 audit(1550978442.473:937): pid=24162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/436/bus" dev="sda1" ino=17249 res=1 03:20:42 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x3) 03:20:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:20:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, 0x0, 0x0) close(r0) [ 478.411876] audit: type=1804 audit(1550978442.683:938): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/437/bus" dev="sda1" ino=17329 res=1 03:20:43 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x3) 03:20:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x10000000}}, 0x14}}, 0x0) 03:20:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, 0x0, 0x0) close(r0) 03:20:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:20:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xfffffffffffffffc, 0x5}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r3, @in={{0x2, 0x4e24, @loopback}}, 0x78, 0x2}, &(0x7f0000000600)=0x90) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getpeername$netlink(r4, &(0x7f0000000180), &(0x7f0000000200)=0xc) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() connect$vsock_dgram(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) ptrace(0x10, r5) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xf6, "dec7d4d1895833adefa02460343c25d15f261b47ae1c6bc294ff5cbdfcdc2327ecfab4b272c20adcf97e587955ebf0cbd2a841f0586e60e0b7896b8bee33e7ea6ba1a35433fbfa36dd979565a53a17231d4a8b05fecd0bb0922312251749c1b181b0a9f050e734b0dad5e9c82d3556e322ed8304410da21dac247e1b0ab741bea2666d2f0051d22b693abc8c23eaca591b30f41c6db6b1e2c30b5f912b296e0c9c1d985e05e8ff33e514c760591f1652768173718f18a7a6d6c24b75144b2711bdbb094e292a6fd1b5b056724245ab9a82b90adbc0af76cedc2d03acbf3667429c11b0aded99f7e8b27e23d54da548457c1317eb7bff"}, &(0x7f0000000340)=0xfe) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={r7, 0x8, 0x8, 0x8, 0x8, 0xffff}, 0x14) write(r6, &(0x7f0000000380)='`', 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000640)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0xe2e, @ipv4={[], [], @remote}, 0x1}, @in={0x2, 0x4e20, @empty}], 0x5c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r5, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) ioctl$KDDELIO(r4, 0x4b35, 0x7fffffff) 03:20:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x3f000000}}, 0x14}}, 0x0) 03:20:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) kcmp(r3, r3, 0x3, r1, r2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, 0x0, 0x0) close(r0) [ 479.057071] audit: type=1804 audit(1550978443.333:939): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir959257026/syzkaller.GnJvQo/438/bus" dev="sda1" ino=17441 res=1 03:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:43 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) 03:20:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x60000000}}, 0x14}}, 0x0) 03:20:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:43 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xffffff7f}}, 0x14}}, 0x0) 03:20:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 481.542903] net_ratelimit: 20 callbacks suppressed [ 481.542913] protocol 88fb is buggy, dev hsr_slave_0 [ 481.553048] protocol 88fb is buggy, dev hsr_slave_1 [ 481.622933] protocol 88fb is buggy, dev hsr_slave_0 [ 481.628068] protocol 88fb is buggy, dev hsr_slave_1 [ 481.702912] protocol 88fb is buggy, dev hsr_slave_0 [ 481.708085] protocol 88fb is buggy, dev hsr_slave_1 [ 481.718273] protocol 88fb is buggy, dev hsr_slave_0 [ 481.723450] protocol 88fb is buggy, dev hsr_slave_1 03:20:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000540)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pwritev(r2, &(0x7f0000000b40)=[{&(0x7f00000005c0)="ba4dd2682675a2431b74cf9de34865fe90e08f3d731151c2d491a191d370af166c96a642bfc022ea66102abd3b59986591ceba137f07a5499770f1e0ca229ab451de60493f9f0e6df5597b98201a5036e88cb90f331b734d583d69e56c39d9d71f14171dab22036a90d4fb8bfb5bd972bdcbf755b6b7c5a8bb27a5a375689b40ea36be7fe5202d2e4956f211aef16c08257a34683838549330a96a29b3182396593987efe463c4ca442a0d2d965946a64076f8c10f4325f3dfda85f522cf166f32f46aa56685deda509ca7824b5378698ae3c565273b5c9ea2", 0xd9}, {&(0x7f00000006c0)="857cb9933d85b3e226930d4ed86c67e5b6c931f8346708f78bc44ff36e4a4ac2f63a8804e203e364ce2fcc4570335ddcf8338a9e862f16011330b7ba5d21bde6b93a59dcd26e1188617d3ad727ebc69fb266f7a0c868645f2cc385fc06b5f840b2e56b03e572baea35a8c3d134b42526bbb643f09e0786b21735153bf71629ac12a2aa44d0643787f6214296e2f56796f9fed09fe88337038f2efa84467f769966b388b1c7bb220032f6701320447fcec9660f5320c01b437e1f96d9", 0xbc}, {&(0x7f0000000780)="e518b4e404bc6bd6e661b8412781a1899371d64ee0809fefeed64bfcd6efc93fc585e7c8ab36de4d2b746548559777a6f5f4eea7fba80e5d1204ed1690d30ff6191aa910906952154bd3bdc6f889c541b68f9370f43bb28d6dc8b43d8e47500687c3c8a3ad54d885ec26f32e7a53efa53fc13841a6ea3a08f0d971718f2b0512442495a517b3678af4f71d9219e9c99e8771462183fb4d2205ccf99baf869dbfb7a72121a9ff4d19e36d8a0a9081bd879a6182502ce5342fd31e0291b565626dec0d438ffe3d7170ad27b97830b0c6b40cf577a13b2460a2ab9847e4162884873b07a8153c368e", 0xe7}, {&(0x7f0000000880)="b1196095703db1f3ff18198081cfa108d73f0783122549f1641b613281095ae28d8d8b3376c1070069ebcc91767a0902d5059a65eb87f5cc4bad6df597bd9b11d9b68daaea543a205f5985772e3404e3390e037c3d1b1b5e8f2f9131678d4333321c5fe6c521a40a87b1360b9ebb4d832850f6a2f3eef4ceb22ac92ec2a271d18d7f82b9547e9de10a6fe3234c9a95304be70d54d9e4c70fd7a7739a54e06e76b74bc12bd2885e989dff2ffa78ccb22f54bc34da648523032ad95f08ae2f4998d94873", 0xc3}, {&(0x7f0000000980)="7680d81956100844a5a8bd7e78dbcc7f7ed5e986322fc998fe03ea4801e9c23f651f97e2162d537383dddf74d5526dac6d464f5373a936e80328d21f0b02ef2339a1fe49dda49aeef2ba49ad1f168eb0ef965e03fe8c3a6c044acba874bba938e0ff3555ba68b933208ff7c884a25c23d3aaabaebb30c8fe712b446ce890cc8180f49c", 0x83}, {&(0x7f0000000a40)="2c9a4cc90b5efc0c2184bbeda9102041992e66fa534d2e48fc0ce5816ee350514cab0c62ca0b1688cdab3a59ef8c6ea1e2841d06c54fd2982c8660ca1c93aa691eb178bdce636f4cf8190485a9b5a6c271780ffb78a07f85facfd9b6b6d25081f867e45c8c471fd121eca307a82e69820fc39f70f64d46fa1c1a15b7731f1511951cf7fed6688fc42175463e24866d2f96f56b98d738d168800c41b7168f706d37b9726f747a7307fc0664fbc5ae957db8486aa170f95d9ff0f41db368d24ec0cb3cb4fdc481a5a9c1a6cb5ac3a8482bbe7e5c7dc5da2fdd9d281271e78ae833bb0e8b07db810ed6289546248f33922b", 0xf0}], 0x6, 0x36) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x32000) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000180)={0x1, 0x7fff, 0x9, 0x65, 0x20, 0x7f}) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0)) ptrace(0x421f, r4) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000580)=0x6, 0x4) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x1) write(r1, &(0x7f0000000bc0)="e341b935fe4a9ccf15d15aa78e99ef55", 0xffffffffffffff26) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000440)={r6, 0xae9e}, &(0x7f0000000480)=0x8) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000c00)={{0x55a6b2d5, 0x1, 0xf1a9, 0x6}, 'syz1\x00', 0x8}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) clone(0x10090000, &(0x7f0000000200)="15", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="41c9af3f6ca415ad75c92faa094217190548171b571177d4de31f823092986641634fe209286f0b2fcceb8ea04c5da1c4fe816f4aa116b80e0eb302129bb2ceb1cb535dbeb2055eab6a752cdf6752c8921cf317a8290f3997baacee7ed2622959c292d139297c5106422eb7282d781dbeea19edbb82dd855fd5608dc3fb84e7788572826f0a6b8df") ptrace$setregset(0x4204, r4, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:46 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:46 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x40030000000000}}, 0x14}}, 0x0) 03:20:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:46 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:46 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) 03:20:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x100000000000000}}, 0x14}}, 0x0) 03:20:46 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 482.342868] protocol 88fb is buggy, dev hsr_slave_0 [ 482.342921] protocol 88fb is buggy, dev hsr_slave_0 03:20:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) r4 = dup2(r3, r0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)=""/138, &(0x7f00000002c0)=0x8a) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:46 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) 03:20:46 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x200000000000000}}, 0x14}}, 0x0) 03:20:47 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) 03:20:47 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) close(r0) 03:20:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 482.816063] device bridge_slave_1 left promiscuous mode [ 482.821653] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.884693] device bridge_slave_0 left promiscuous mode [ 482.894629] bridge0: port 1(bridge_slave_0) entered disabled state 03:20:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x300000000000000}}, 0x14}}, 0x0) 03:20:47 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) close(r0) 03:20:47 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) [ 486.626556] bond2 (unregistering): Released all slaves [ 486.638380] bond1 (unregistering): Released all slaves [ 486.662937] net_ratelimit: 26 callbacks suppressed [ 486.662946] protocol 88fb is buggy, dev hsr_slave_0 [ 486.673047] protocol 88fb is buggy, dev hsr_slave_1 [ 486.684780] device hsr_slave_1 left promiscuous mode [ 486.738710] device hsr_slave_0 left promiscuous mode [ 486.779404] team0 (unregistering): Port device team_slave_1 removed [ 486.790101] team0 (unregistering): Port device team_slave_0 removed [ 486.802054] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 486.839349] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 486.911171] bond0 (unregistering): Released all slaves 03:20:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x400000000000000}}, 0x14}}, 0x0) 03:20:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:51 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) close(r0) 03:20:51 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) 03:20:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:51 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) close(r0) 03:20:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x800000000000000}}, 0x14}}, 0x0) 03:20:51 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) 03:20:51 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) close(r0) 03:20:51 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) close(r0) [ 487.782867] protocol 88fb is buggy, dev hsr_slave_0 [ 487.788116] protocol 88fb is buggy, dev hsr_slave_1 [ 487.862895] protocol 88fb is buggy, dev hsr_slave_0 [ 487.868034] protocol 88fb is buggy, dev hsr_slave_1 [ 487.942958] protocol 88fb is buggy, dev hsr_slave_0 [ 487.948127] protocol 88fb is buggy, dev hsr_slave_1 [ 487.953330] protocol 88fb is buggy, dev hsr_slave_0 [ 487.958413] protocol 88fb is buggy, dev hsr_slave_1 03:20:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x4207, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000180)=0xfffffffffffffff2) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:52 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:52 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) close(r0) 03:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xa00000000000000}}, 0x14}}, 0x0) 03:20:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:52 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) close(r0) 03:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xe00000000000000}}, 0x14}}, 0x0) 03:20:52 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x501000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80100080}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x402}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) getpgrp(r2) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xf00000000000000}}, 0x14}}, 0x0) 03:20:52 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) close(r0) 03:20:52 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x1000000000000000}}, 0x14}}, 0x0) 03:20:52 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) close(r0) 03:20:52 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe2(&(0x7f00000000c0), 0x800) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:20:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)=0xfebc) pwrite64(r0, &(0x7f0000000040)="e1494e46dbfcfe51cda636089ed3148b6987f16b3e2a86f0c3e566d77a8a7a8c9b24192e09fdb433ac7e", 0x2a, 0x0) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:53 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:20:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x3f00000000000000}}, 0x14}}, 0x0) 03:20:53 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) close(r0) 03:20:53 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) close(r0) 03:20:53 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:20:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x6000000000000000}}, 0x14}}, 0x0) 03:20:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0xf5, "85400fbf72d56632821135615540aedbbe4e05c867cb3e241cc05879482627f4610888c8c920c8b73431d93b71673aa5ddb202551828a605a281023a9baa0b6779325fc7d0346a6108f4f8f1b58eba621cbdd13dd064a2d30c9d08134d6f6dcb50a53e12f6548fe4cfcd264c7f3817f646464e39aa232f3329c08f8e21301a75bb0b9ea88fe519f0681b5dc8497aa7a0c0fa8e295e1b25696bb51619b19c5bfddd8800c602aea8b57a8d78076d910619ba3f7e5fc42453d39b137a6c927ce4df78f37f23b7329fb62ed5979b68e5bd960975c0767c856f35a96e85a7c95b59076fa380d35c05df16eb70711b4719988911f1565100"}, &(0x7f0000000040)=0x119) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000180)=0x19) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:53 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 03:20:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) write(r6, &(0x7f0000000380)='`', 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:54 executing program 5: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xffffff7f00000000}}, 0x14}}, 0x0) 03:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000200)="2096f4e321418478f15932503b08457247dab7e21d69bc27fbec6b2bd72ef5d1b296883c825922e2f381a4fa708ba2300e6f30771702b2feccd9519421658fb8ef2b1fdfad635e4c8f4555802625a36f1c1e239ffa2c1e003db869df8e85923643da1cb241cb37fb2d6b091b9c5026ae0f1442a585f8107a26c82fe11a9ed2dccc5e3b4f2204ba3cc3557eab34b887c35fcb791dedceeca10ae97b4e67f2197ef5a3e2acd8", 0xa5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:54 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 03:20:54 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 03:20:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0xffffffff00000000}}, 0x14}}, 0x0) 03:20:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x28400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x83, 0x101000) ioctl$RTC_WIE_ON(r4, 0x700f) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}}, 0x0) 03:20:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:55 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}}, 0x0) 03:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r4 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r4, 0x8}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, &(0x7f00000003c0)="e7b21255d68533287abc97c323c620fc67b9aa491fe212ee4d636bae3c25a639bcec8ae8ce25d96d8df613b2e84f438d0b5eea94937f8759b0c8315c430a1d49513a75db4cc4f283f131e68efea3de7d5c0ed2245e375a059ba8640e944bc736235114ff7a80beed65073de315559c059509fe", &(0x7f0000000440)=""/4096) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:55 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}}, 0x0) 03:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x1, 0xffffffffffff478b, 0x1}) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:56 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}}, 0x0) 03:20:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000180), 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@report={0x258, 0x20, 0x410, 0x70bd2a, 0x25dfdbfe, {0x3c, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@broadcast, 0x4e20, 0x5, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0xbf, r2, r3}}, [@ipv6_hthresh={0x8, 0x4, {0x72, 0x8}}, @tfcpad={0x8, 0x16, 0x4}, @lifetime_val={0x24, 0x9, {0x5, 0x1, 0x4952, 0x2d47fe14}}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e21, @in6=@remote}}, @proto={0x8, 0x19, 0x32}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in=@rand_addr=0x7}}, @policy_type={0xc}, @algo_auth_trunc={0xa0, 0x14, {{'sha1\x00'}, 0x298, 0x60, "cbdb9493205a946bf93725094796d13db88595f4f5754338d23fc7954d3b65c804cac680ce0c1e64aeea376609e4d31f585f7281a0cc5cc6927725f6a058febf6f1a13c209b16227380f481ab19eb0b40b5e4e"}}, @lastused={0xc, 0xf, 0x9}, @algo_crypt={0xe0, 0x2, {{'salsa20-generic\x00'}, 0x4a8, "0a025a8c0edbba2ce7523f9d89323ab2cae87c4f5a1c348c2dbd04c4a729429a92639517852ec9c5eed1acb65031122db8a1c56a6f63b5e3cdf38a870ca9750505d2a4dadb59f84c9ad187f4dcf55efa91b2a8e2f2f1ae1358b566dc257d992ca2529e1106c242a38f9b64528ad172d14ef637b628e3e61e16db0a50a68dc0a6670ed3ecbc398b43f4845fdcae2804d0cc27590c6b"}}]}, 0x258}}, 0x8000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) ptrace(0x10, r5) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r6, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r5, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x0) 03:20:56 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/58, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 491.942897] net_ratelimit: 16 callbacks suppressed [ 491.942955] protocol 88fb is buggy, dev hsr_slave_0 [ 491.953081] protocol 88fb is buggy, dev hsr_slave_1 03:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) inotify_init1(0x80800) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) [ 492.022896] protocol 88fb is buggy, dev hsr_slave_0 [ 492.028074] protocol 88fb is buggy, dev hsr_slave_1 03:20:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 492.102883] protocol 88fb is buggy, dev hsr_slave_0 [ 492.108071] protocol 88fb is buggy, dev hsr_slave_1 [ 492.113250] protocol 88fb is buggy, dev hsr_slave_0 [ 492.118347] protocol 88fb is buggy, dev hsr_slave_1 03:20:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r3) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xe}}, 0x14}}, 0x0) 03:20:56 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)='*'}], 0x100000db, 0x0, 0xffffffffffffff08}, 0x0) close(r0) 03:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x0, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:56 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x0, 0x2) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000480)={0xffffffffffffff80, 0x3f, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000180)={0x730, 0x1, 0x7, 0xf0, &(0x7f0000000280)=""/240, 0x26, &(0x7f0000000140)=""/38, 0x56, &(0x7f00000003c0)=""/86}) r5 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x4) write(r5, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:57 executing program 1: shutdown(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) [ 492.742902] protocol 88fb is buggy, dev hsr_slave_0 [ 492.748050] protocol 88fb is buggy, dev hsr_slave_1 03:20:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xf}}, 0x14}}, 0x0) 03:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x0, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:57 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x10000200000008) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) close(r0) 03:20:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r2) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) prctl$PR_SET_TSC(0x1a, 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x101, @mcast2, 0x6}, {0xa, 0x4e21, 0x1, @loopback, 0x7}, r5, 0x2}}, 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x207, &(0x7f00000001c0)={0x0, 0xfffffffffffffe95}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000002c0)={{0x2, 0x3, 0xffffffffffffa9fd, 0x1, 0x3}, 0x40, 0x4, 0xd4}) 03:20:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x10}}, 0x14}}, 0x0) 03:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x0, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:57 executing program 1: r0 = socket$inet(0x2, 0x0, 0x86) shutdown(r0, 0x1) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@empty, @in=@loopback}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) 03:20:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x60}}, 0x14}}, 0x0) 03:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x325000) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0x2) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000200)={0xffffffffffffff01, 0x9c6, 0xffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:58 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) shutdown(r0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0x2, 0x134c, 0x8, 0xf7, "531d5691e719d2494a95f39d37e21657215b80bd974e00ddbf55aea36a85cf57a0bd7c29be0afb332fd3117831c0f72766cbddb62383fd3944a826779b6545c31e4dae02d93755ee691bb8fe51c2750428ce7defa2ebb2109b731e05a4d3fe1dca931a68b316d1fe4470a09802d549f10b5fb0e3718ef4dd04740d1c8d80cafdb6254c896aef7d2d9c30bce9b2a0396e893f895f27f2428fbd6ace0a0832051fc0a42fa64fd037254cbf5bf0763ac425403d8586c9cce46db94230316683f8b05f6bff7fbada2a3ff345eeb2a17e2f95e87881ba40f4711c2542a2f33af0be67be106ca3d3013f3b4e8e02a71333e11ac284b22298c115"}, 0x103) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 493.912043] *** Guest State *** [ 493.927716] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 493.978072] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 493.997782] CR3 = 0x0000000000000000 [ 494.011248] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 494.018375] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 494.030569] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 494.038319] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 494.049967] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 494.058357] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.077093] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.088333] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.099384] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.109340] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.119207] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.129148] GDTR: limit=0x00000000, base=0x0000000000000000 [ 494.138967] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.148863] IDTR: limit=0x00000000, base=0x0000000000000000 [ 494.157892] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.166040] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 494.172488] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 494.180043] Interruptibility = 00000000 ActivityState = 00000000 [ 494.186384] *** Host State *** [ 494.189686] RIP = 0xffffffff811b34c0 RSP = 0xffff888054c978b8 [ 494.195775] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 494.202201] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 494.210179] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 494.216118] CR0=0000000080050033 CR3=00000000960e6000 CR4=00000000001426f0 [ 494.223276] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 494.230003] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 494.236137] *** Control State *** [ 494.239622] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 494.246375] EntryControls=0000d1ff ExitControls=002fefff [ 494.251839] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 494.258876] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 494.265694] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 494.272286] reason=80000021 qualification=0000000000000000 [ 494.278690] IDTVectoring: info=00000000 errcode=00000000 [ 494.284682] TSC Offset = 0xfffffef517d96f0e [ 494.289002] EPT pointer = 0x00000000a604101e 03:20:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r2) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x300}}, 0x14}}, 0x0) 03:20:58 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x5, @loopback, 0xc1}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x9}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0xffffffff00000001, @remote, 0x200}, @in={0x2, 0x4e24, @local}], 0x94) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) utimensat(r4, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x100) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:20:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:20:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:20:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xa00}}, 0x14}}, 0x0) [ 494.591079] *** Guest State *** [ 494.600300] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 03:20:58 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x4) fstat(r0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x80001, 0x84) shutdown(r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r1) 03:20:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x80000000, 0x4, 0x1000000000, 0x4}, 0x6) ptrace(0x10, r2) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0xffff}, @timestamp, @timestamp], 0x3) write(r4, &(0x7f0000000380)='`', 0x1) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) [ 494.668806] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 494.698797] CR3 = 0x0000000000000000 [ 494.711259] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 03:20:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 494.732016] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 494.753235] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 494.773516] RFLAGS=0x00000002 DR7 = 0x0000000000000400 03:20:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xe00}}, 0x14}}, 0x0) [ 494.789981] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 494.849840] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.868326] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.877458] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.894604] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.956940] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.971889] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 494.987366] GDTR: limit=0x00000000, base=0x0000000000000000 [ 494.997974] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.015385] IDTR: limit=0x00000000, base=0x0000000000000000 [ 495.027507] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.036074] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 495.042538] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 495.050415] Interruptibility = 00000000 ActivityState = 00000000 [ 495.056746] *** Host State *** [ 495.059957] RIP = 0xffffffff811b34c0 RSP = 0xffff88805353f8b8 [ 495.066001] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 495.072436] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 495.080313] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 495.086255] CR0=0000000080050033 CR3=000000008c110000 CR4=00000000001426f0 [ 495.093362] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 495.100044] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 495.106171] *** Control State *** [ 495.109630] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 495.116374] EntryControls=0000d1ff ExitControls=002fefff [ 495.121836] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 495.128890] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 495.135626] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 495.142272] reason=80000021 qualification=0000000000000000 [ 495.148678] IDTVectoring: info=00000000 errcode=00000000 [ 495.154255] TSC Offset = 0xfffffef4bcfe6939 [ 495.158584] EPT pointer = 0x00000000565e001e 03:20:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r2) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:20:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) 03:20:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xf00}}, 0x14}}, 0x0) 03:20:59 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:20:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000320000042cbd7000fbdbdf25000000000c0002000000005b6223fe001400010010000100000008000300b6000000ddff14000100100014000000080001007874000000000c0002000000000001000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r4 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\x9d[g\xcc*)\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e', 0x5) write(r0, &(0x7f0000000740)='\x00', 0xfffffe75) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) socket(0x9, 0x3, 0x2) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0x441a457f1741b6a4}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000380)='+keyring0x0}) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000480)=[r5, r6, r7, r8, r9, r10]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x400) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500), 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000004c0)={'caif0\x00', {0x2, 0x4e21, @empty}}) 03:20:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) [ 495.562928] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 03:20:59 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20200, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x3ff, 0x4, 0x5, 0x9a, 0x0, 0xcbca, 0x0, 0x2, 0x3f, 0x200, 0x7fffffff, 0x1f, 0x8, 0x8001, 0xfffffffffffffff8, 0x3, 0x6, 0x6, 0x0, 0x80000000, 0x5, 0x1000, 0x6, 0x7fff, 0xb11, 0x5, 0x5, 0x3f, 0x4, 0x8, 0x1ff, 0x5, 0x100000001, 0x4, 0xe151, 0x58e3, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x800}, 0x0, 0x1, 0xa642, 0x7, 0x4, 0x1000, 0x2}) close(r0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x1}, 0x28, 0x2) [ 495.622220] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 495.646658] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 495.666907] kauditd_printk_skb: 1 callbacks suppressed [ 495.666923] audit: type=1400 audit(1550978459.943:941): avc: denied { map } for pid=26480 comm="syz-executor.2" path="socket:[64778]" dev="sockfs" ino=64778 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 495.704362] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 495.729827] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 495.771870] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.781654] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.796305] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.813473] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.821604] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.830382] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.838654] GDTR: limit=0x00000000, base=0x0000000000000000 [ 495.846738] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.854780] IDTR: limit=0x00000000, base=0x0000000000000000 [ 495.863534] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 495.871524] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 495.878039] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 495.885555] Interruptibility = 00000000 ActivityState = 00000000 [ 495.891779] *** Host State *** [ 495.895045] RIP = 0xffffffff811b34c0 RSP = 0xffff88808a6978b8 [ 495.901031] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 495.907507] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 495.915366] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 495.921286] CR0=0000000080050033 CR3=000000009078c000 CR4=00000000001426f0 [ 495.928374] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 495.935134] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 495.941212] *** Control State *** [ 495.944760] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 495.951445] EntryControls=0000d1ff ExitControls=002fefff [ 495.956974] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 495.963983] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 495.970665] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 495.977350] reason=80000021 qualification=0000000000000000 [ 495.983736] IDTVectoring: info=00000000 errcode=00000000 [ 495.989194] TSC Offset = 0xfffffef4459fcb0d [ 495.993580] EPT pointer = 0x0000000056af901e 03:21:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) 03:21:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x6000}}, 0x14}}, 0x0) 03:21:00 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000200)=""/212) ptrace$setregset(0x4204, r1, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) ptrace(0x4207, r2) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:00 executing program 1: shutdown(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x1, 0x8, 0x1, 0xfa9]}, 0xc) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) pread64(r1, &(0x7f00000000c0)=""/115, 0x73, 0x0) close(0xffffffffffffffff) 03:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:21:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) 03:21:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x34000}}, 0x14}}, 0x0) 03:21:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2208000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @remote}]}) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:00 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="34eb3e351aad4ef6c64fb3dc02bf1ac4", 0x1ff}, @in={0x2, 0x4e21, @multicast2}], 0x2c) close(r0) 03:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:21:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) 03:21:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x400300}}, 0x14}}, 0x0) 03:21:00 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x5) shutdown(r0, 0x80000000001) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 497.062897] net_ratelimit: 24 callbacks suppressed [ 497.062904] protocol 88fb is buggy, dev hsr_slave_0 [ 497.073066] protocol 88fb is buggy, dev hsr_slave_1 03:21:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) flistxattr(r1, &(0x7f00000003c0)=""/4096, 0x1000) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) gettid() openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x420000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0x20, 0x3f, 0x0, r5}, {0x8001, 0x7, 0x1, 0xfff, 0x4, 0x8001, 0x8000, 0xad05}, {0x3973, 0xdc2, 0xffffffffffffffd1, 0x1000}, 0x8, 0x6e6bb1, 0x2, 0x0, 0x2, 0x2}, {{@in6=@rand_addr="77ae66bbdd0d545917d55501244a3473", 0x4d4, 0x3c}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x3504, 0x3, 0x0, 0x1, 0x4, 0x1, 0x9}}, 0xe8) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 03:21:01 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x10) close(r0) 03:21:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x1000000}}, 0x14}}, 0x0) 03:21:01 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/58, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 03:21:01 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x2000000}}, 0x14}}, 0x0) 03:21:01 executing program 4 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x101300, 0x82) chdir(&(0x7f0000000480)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x13f, 0xb}}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = open(&(0x7f0000000240)='./file0\x00', 0x571041, 0x108) ptrace(0xe, r3) r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_security(0x11, r5, &(0x7f0000000300)=""/27, 0x1b) r6 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r6, &(0x7f0000000380)='`', 0x1) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f00000004c0)) move_pages(r3, 0x6, &(0x7f0000000340)=[&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil], &(0x7f00000003c0)=[0x3810, 0x8], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000440)={0x0, 0x8, 0x16}) ptrace$setregset(0x4204, r3, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 497.558473] FAULT_INJECTION: forcing a failure. [ 497.558473] name failslab, interval 1, probability 0, space 0, times 0 [ 497.570552] CPU: 1 PID: 26984 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #85 [ 497.577848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.587222] Call Trace: [ 497.589835] dump_stack+0x172/0x1f0 [ 497.593479] should_fail.cold+0xa/0x1b [ 497.597392] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 497.602514] ? lock_downgrade+0x810/0x810 [ 497.606683] ? ___might_sleep+0x163/0x280 [ 497.610847] __should_failslab+0x121/0x190 [ 497.615089] should_failslab+0x9/0x14 [ 497.618890] kmem_cache_alloc+0x2b2/0x6f0 [ 497.623037] ? __lock_acquire+0x53b/0x4700 [ 497.627288] mmu_topup_memory_caches+0x97/0x490 [ 497.631955] kvm_mmu_load+0x21/0x1200 [ 497.635744] ? mark_held_locks+0x100/0x100 [ 497.639973] ? handle_ept_misconfig+0x3e0/0x3e0 [ 497.644657] vcpu_enter_guest+0x3d72/0x6290 [ 497.648987] ? __mutex_lock+0x3cd/0x1310 [ 497.653054] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 497.657220] ? emulator_read_emulated+0x50/0x50 [ 497.661894] ? lock_acquire+0x16f/0x3f0 [ 497.665868] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 497.670885] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 497.675715] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 497.680726] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 497.684710] ? kvm_vcpu_block+0xcd0/0xcd0 [ 497.688857] ? mark_held_locks+0x100/0x100 [ 497.693096] ? proc_fail_nth_write+0x9d/0x1e0 [ 497.697609] ? proc_cwd_link+0x1d0/0x1d0 [ 497.701674] ? lock_is_held_type+0x17e/0x210 [ 497.706089] ? __f_unlock_pos+0x19/0x20 [ 497.710061] ? find_held_lock+0x35/0x130 [ 497.714122] ? __fget+0x340/0x540 [ 497.717573] ? find_held_lock+0x35/0x130 [ 497.721624] ? __fget+0x340/0x540 [ 497.725089] ? kvm_vcpu_block+0xcd0/0xcd0 [ 497.729264] do_vfs_ioctl+0xd6e/0x1390 [ 497.733178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 497.738727] ? selinux_file_ioctl+0x125/0x5e0 [ 497.743233] ? ioctl_preallocate+0x210/0x210 [ 497.747654] ? selinux_file_mprotect+0x620/0x620 [ 497.752420] ? iterate_fd+0x360/0x360 [ 497.756258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 497.761787] ? fput+0x128/0x1a0 [ 497.765074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 497.770609] ? security_file_ioctl+0x93/0xc0 [ 497.775011] ksys_ioctl+0xab/0xd0 [ 497.778453] __x64_sys_ioctl+0x73/0xb0 [ 497.782365] do_syscall_64+0x103/0x610 [ 497.786260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.791444] RIP: 0033:0x457e29 [ 497.794624] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.813528] RSP: 002b:00007effa9451c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.821248] RAX: ffffffffffffffda RBX: 00007effa9451c90 RCX: 0000000000457e29 [ 497.828523] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 497.835893] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 497.843167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effa94526d4 [ 497.850451] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 03:21:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x3000000}}, 0x14}}, 0x0) 03:21:02 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\xd7mG9\xf0\b\x84\xa2m\x00:)\x00\xbbD4\xd3\x15\xc0\x01\xb4E\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcduVV=\xbd\xc2n$\x15\x9arJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\x06\r\xeeHg', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:02 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:02 executing program 4 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 498.083230] FAULT_INJECTION: forcing a failure. [ 498.083230] name failslab, interval 1, probability 0, space 0, times 0 [ 498.110794] FAULT_INJECTION: forcing a failure. [ 498.110794] name failslab, interval 1, probability 0, space 0, times 0 [ 498.129897] CPU: 1 PID: 27096 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #85 [ 498.137235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.146784] Call Trace: [ 498.149398] dump_stack+0x172/0x1f0 [ 498.153049] should_fail.cold+0xa/0x1b [ 498.156954] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 498.162076] ? lock_downgrade+0x810/0x810 [ 498.166244] ? ___might_sleep+0x163/0x280 [ 498.170413] __should_failslab+0x121/0x190 [ 498.174679] should_failslab+0x9/0x14 [ 498.178594] kmem_cache_alloc+0x2b2/0x6f0 [ 498.182761] ? __lock_acquire+0x53b/0x4700 [ 498.187026] mmu_topup_memory_caches+0x97/0x490 [ 498.191725] kvm_mmu_load+0x21/0x1200 [ 498.195541] ? mark_held_locks+0x100/0x100 [ 498.199790] ? handle_ept_misconfig+0x3e0/0x3e0 [ 498.204490] vcpu_enter_guest+0x3d72/0x6290 [ 498.209056] ? __mutex_lock+0x3cd/0x1310 [ 498.213133] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 498.217327] ? emulator_read_emulated+0x50/0x50 [ 498.222020] ? lock_acquire+0x16f/0x3f0 [ 498.226019] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 498.231066] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 498.235926] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 498.240966] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 498.244954] ? kvm_vcpu_block+0xcd0/0xcd0 [ 498.249114] ? mark_held_locks+0x100/0x100 [ 498.253363] ? proc_fail_nth_write+0x9d/0x1e0 [ 498.257879] ? proc_cwd_link+0x1d0/0x1d0 [ 498.261954] ? __f_unlock_pos+0x19/0x20 [ 498.262945] protocol 88fb is buggy, dev hsr_slave_0 [ 498.265938] ? find_held_lock+0x35/0x130 [ 498.265954] ? __fget+0x340/0x540 [ 498.265969] ? find_held_lock+0x35/0x130 [ 498.265983] ? __fget+0x340/0x540 [ 498.271079] protocol 88fb is buggy, dev hsr_slave_1 [ 498.275083] ? kvm_vcpu_block+0xcd0/0xcd0 [ 498.275100] do_vfs_ioctl+0xd6e/0x1390 [ 498.275116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 498.275132] ? selinux_file_ioctl+0x125/0x5e0 [ 498.275145] ? ioctl_preallocate+0x210/0x210 [ 498.275170] ? selinux_file_mprotect+0x620/0x620 [ 498.275192] ? iterate_fd+0x360/0x360 [ 498.322186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 498.327752] ? fput+0x128/0x1a0 [ 498.331060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 498.336622] ? security_file_ioctl+0x93/0xc0 [ 498.341056] ksys_ioctl+0xab/0xd0 [ 498.344532] __x64_sys_ioctl+0x73/0xb0 [ 498.348442] do_syscall_64+0x103/0x610 [ 498.352350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 498.357555] RIP: 0033:0x457e29 [ 498.360765] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:21:02 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xffffffffffffffec) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 498.379730] RSP: 002b:00007effa9451c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.387458] RAX: ffffffffffffffda RBX: 00007effa9451c90 RCX: 0000000000457e29 [ 498.394751] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 498.402037] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 498.409410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effa94526d4 [ 498.416706] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 [ 498.424265] protocol 88fb is buggy, dev hsr_slave_0 [ 498.429361] protocol 88fb is buggy, dev hsr_slave_1 [ 498.433396] CPU: 0 PID: 27098 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 498.434688] protocol 88fb is buggy, dev hsr_slave_0 [ 498.441675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.441686] Call Trace: [ 498.446839] protocol 88fb is buggy, dev hsr_slave_1 [ 498.456093] dump_stack+0x172/0x1f0 [ 498.456112] should_fail.cold+0xa/0x1b [ 498.456128] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 498.456147] ? lock_downgrade+0x810/0x810 [ 498.458851] protocol 88fb is buggy, dev hsr_slave_0 [ 498.463751] ? ___might_sleep+0x163/0x280 [ 498.463767] __should_failslab+0x121/0x190 [ 498.463785] should_failslab+0x9/0x14 [ 498.463804] kmem_cache_alloc_trace+0x2d1/0x760 [ 498.467480] protocol 88fb is buggy, dev hsr_slave_1 [ 498.471316] alloc_pipe_info+0xb9/0x430 [ 498.502388] ? __might_sleep+0x95/0x190 [ 498.502413] splice_direct_to_actor+0x775/0x970 [ 498.502431] ? avc_policy_seqno+0xd/0x70 [ 498.511418] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 498.511438] ? generic_pipe_buf_nosteal+0x10/0x10 [ 498.511457] ? selinux_file_permission+0x92/0x550 [ 498.511476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 498.511494] ? do_splice_to+0x190/0x190 [ 498.548413] ? rw_verify_area+0x118/0x360 [ 498.552690] do_splice_direct+0x1da/0x2a0 [ 498.556873] ? splice_direct_to_actor+0x970/0x970 [ 498.561742] ? rcu_read_lock_sched_held+0x110/0x130 [ 498.566782] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 498.571558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 498.577117] ? __sb_start_write+0x1ac/0x360 [ 498.581463] do_sendfile+0x597/0xd00 [ 498.585229] ? do_compat_pwritev64+0x1c0/0x1c0 [ 498.589844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 498.595402] ? fput+0x128/0x1a0 [ 498.598714] __x64_sys_sendfile64+0x1dd/0x220 [ 498.603246] ? __ia32_sys_sendfile+0x230/0x230 [ 498.607894] ? do_syscall_64+0x26/0x610 [ 498.611912] ? lockdep_hardirqs_on+0x415/0x5d0 [ 498.616521] ? trace_hardirqs_on+0x67/0x230 [ 498.620876] do_syscall_64+0x103/0x610 [ 498.624814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 498.630025] RIP: 0033:0x457e29 [ 498.633235] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.652152] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 498.659913] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 498.667210] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 498.674495] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:21:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x4000000}}, 0x14}}, 0x0) [ 498.681784] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 498.689071] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 03:21:03 executing program 4 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:03 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:03 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000180)) 03:21:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x8000000}}, 0x14}}, 0x0) [ 498.948856] FAULT_INJECTION: forcing a failure. [ 498.948856] name failslab, interval 1, probability 0, space 0, times 0 [ 498.959276] FAULT_INJECTION: forcing a failure. [ 498.959276] name failslab, interval 1, probability 0, space 0, times 0 [ 498.987741] CPU: 1 PID: 27221 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #85 [ 498.995077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.004446] Call Trace: [ 499.007060] dump_stack+0x172/0x1f0 [ 499.010718] should_fail.cold+0xa/0x1b [ 499.014627] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 499.019744] ? lock_downgrade+0x810/0x810 [ 499.023919] ? ___might_sleep+0x163/0x280 [ 499.028087] __should_failslab+0x121/0x190 [ 499.032338] should_failslab+0x9/0x14 [ 499.036148] kmem_cache_alloc+0x2b2/0x6f0 [ 499.040319] ? __lock_acquire+0x53b/0x4700 [ 499.044578] mmu_topup_memory_caches+0x97/0x490 [ 499.049608] kvm_mmu_load+0x21/0x1200 [ 499.053419] ? mark_held_locks+0x100/0x100 [ 499.057674] ? handle_ept_misconfig+0x3e0/0x3e0 [ 499.062365] vcpu_enter_guest+0x3d72/0x6290 [ 499.066706] ? __mutex_lock+0x3cd/0x1310 [ 499.070786] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 499.074955] ? emulator_read_emulated+0x50/0x50 [ 499.079634] ? lock_acquire+0x16f/0x3f0 [ 499.083629] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 499.088663] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 499.093537] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 499.098578] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 499.102569] ? kvm_vcpu_block+0xcd0/0xcd0 [ 499.106731] ? mark_held_locks+0x100/0x100 [ 499.110980] ? proc_fail_nth_write+0x9d/0x1e0 [ 499.115485] ? proc_cwd_link+0x1d0/0x1d0 [ 499.119562] ? __f_unlock_pos+0x19/0x20 [ 499.123545] ? find_held_lock+0x35/0x130 [ 499.127614] ? __fget+0x340/0x540 [ 499.131077] ? find_held_lock+0x35/0x130 [ 499.135168] ? __fget+0x340/0x540 [ 499.138639] ? kvm_vcpu_block+0xcd0/0xcd0 [ 499.142797] do_vfs_ioctl+0xd6e/0x1390 [ 499.146701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 499.152255] ? selinux_file_ioctl+0x125/0x5e0 [ 499.156760] ? ioctl_preallocate+0x210/0x210 [ 499.161190] ? selinux_file_mprotect+0x620/0x620 [ 499.165964] ? iterate_fd+0x360/0x360 [ 499.169774] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 499.175330] ? fput+0x128/0x1a0 [ 499.178621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 499.184193] ? security_file_ioctl+0x93/0xc0 [ 499.188633] ksys_ioctl+0xab/0xd0 [ 499.192114] __x64_sys_ioctl+0x73/0xb0 [ 499.196013] do_syscall_64+0x103/0x610 [ 499.199916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 499.205118] RIP: 0033:0x457e29 [ 499.208325] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.227242] RSP: 002b:00007effa9451c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.234970] RAX: ffffffffffffffda RBX: 00007effa9451c90 RCX: 0000000000457e29 [ 499.242257] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 499.249537] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 499.256819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effa94526d4 [ 499.264099] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 [ 499.271426] CPU: 0 PID: 27226 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 499.278731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.288102] Call Trace: [ 499.290717] dump_stack+0x172/0x1f0 [ 499.294358] should_fail.cold+0xa/0x1b [ 499.298269] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 499.303384] ? lock_downgrade+0x810/0x810 [ 499.303404] ? ___might_sleep+0x163/0x280 [ 499.303423] __should_failslab+0x121/0x190 [ 499.303442] should_failslab+0x9/0x14 [ 499.311759] __kmalloc+0x2dc/0x740 [ 499.311775] ? kmem_cache_alloc_trace+0x354/0x760 [ 499.311796] ? alloc_pipe_info+0x199/0x430 [ 499.311814] alloc_pipe_info+0x199/0x430 [ 499.336496] splice_direct_to_actor+0x775/0x970 [ 499.341540] ? avc_policy_seqno+0xd/0x70 [ 499.345613] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 499.350650] ? generic_pipe_buf_nosteal+0x10/0x10 [ 499.355519] ? selinux_file_permission+0x92/0x550 [ 499.360382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 499.365941] ? do_splice_to+0x190/0x190 [ 499.369940] ? rw_verify_area+0x118/0x360 [ 499.374105] do_splice_direct+0x1da/0x2a0 [ 499.378275] ? splice_direct_to_actor+0x970/0x970 [ 499.383130] ? rcu_read_lock_sched_held+0x110/0x130 [ 499.388181] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 499.392945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 499.398496] ? __sb_start_write+0x1ac/0x360 [ 499.402832] do_sendfile+0x597/0xd00 [ 499.406563] ? do_compat_pwritev64+0x1c0/0x1c0 [ 499.411193] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 499.416745] ? fput+0x128/0x1a0 [ 499.420040] __x64_sys_sendfile64+0x1dd/0x220 [ 499.424561] ? __ia32_sys_sendfile+0x230/0x230 [ 499.429176] ? do_syscall_64+0x26/0x610 [ 499.433183] ? lockdep_hardirqs_on+0x415/0x5d0 [ 499.437785] ? trace_hardirqs_on+0x67/0x230 [ 499.442127] do_syscall_64+0x103/0x610 [ 499.446039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 499.451258] RIP: 0033:0x457e29 [ 499.454458] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.473374] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 499.481112] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 499.488398] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 03:21:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) sysfs$2(0x2, 0x1, &(0x7f00000003c0)=""/4096) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="c8c03050226758aebc76fbaf38b37be90b954aec4d67e4f0e4fef0cc119f4da21d7da73e4099c564d84b05496dc03d0a3fd9eb38398a24fd400a746d50bef256481bb76d5a1f2e425f70e6f9daaf1970aa2d023d61cdc4d6af493f51ee4d6987a10bf02da2b47c8d829cadf052ce0fde96970ce2ee43acb74ab0efdc5765ef839101ff080d371daae5b717c19c92d8c0ec2588c0e247e19aba9492bc72d392db91c72a777298ff503dec11440cf37612d3e5a59d135d6f3bdf56aa95fdfff5739a01250c7e7e5a09deae24f45fa8d5a65f8d31534557927dd70025de7b69479158dbcd6d72", 0xe5, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r4, r5) 03:21:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xa000000}}, 0x14}}, 0x0) [ 499.495687] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 499.502972] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 499.510261] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 03:21:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xe000000}}, 0x14}}, 0x0) 03:21:03 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x5eaf, 0x6, 0x5) close(r0) 03:21:03 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:04 executing program 4 (fault-call:5 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xf000000}}, 0x14}}, 0x0) 03:21:04 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) close(r0) r1 = socket$inet(0x2, 0x80001, 0xa4) shutdown(r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r1) 03:21:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 499.801740] FAULT_INJECTION: forcing a failure. [ 499.801740] name failslab, interval 1, probability 0, space 0, times 0 [ 499.872658] CPU: 1 PID: 27358 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 499.875452] FAULT_INJECTION: forcing a failure. [ 499.875452] name failslab, interval 1, probability 0, space 0, times 0 [ 499.880009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.880017] Call Trace: [ 499.880047] dump_stack+0x172/0x1f0 [ 499.880070] should_fail.cold+0xa/0x1b [ 499.880088] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 499.915835] ? lock_downgrade+0x810/0x810 [ 499.920009] ? ___might_sleep+0x163/0x280 [ 499.924190] __should_failslab+0x121/0x190 [ 499.928444] should_failslab+0x9/0x14 [ 499.932258] kmem_cache_alloc_node_trace+0x270/0x720 [ 499.937368] ? lock_downgrade+0x810/0x810 [ 499.941530] __kmalloc_node+0x3d/0x70 [ 499.945343] kvmalloc_node+0x68/0x100 [ 499.949247] iov_iter_get_pages_alloc+0x860/0x1260 [ 499.954200] ? unwind_get_return_address+0x61/0xa0 [ 499.959144] ? __save_stack_trace+0x8a/0xf0 [ 499.963495] ? iov_iter_revert+0xaa0/0xaa0 [ 499.967742] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 499.972785] ? iov_iter_pipe+0xba/0x2f0 [ 499.976781] default_file_splice_read+0x199/0x890 [ 499.981641] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 499.986767] ? kasan_kmalloc+0x9/0x10 [ 499.990575] ? __kmalloc+0x15c/0x740 [ 499.994301] ? alloc_pipe_info+0x199/0x430 [ 499.998551] ? do_sendfile+0x597/0xd00 [ 500.002449] ? do_syscall_64+0x103/0x610 [ 500.006525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.011899] ? iter_file_splice_write+0xbe0/0xbe0 [ 500.016761] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 500.021618] ? __lock_is_held+0xb6/0x140 [ 500.025700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.031245] ? fsnotify+0x395/0xbd0 [ 500.034887] ? fsnotify+0xbd0/0xbd0 [ 500.038525] ? fsnotify_first_mark+0x210/0x210 [ 500.043120] ? avc_policy_seqno+0xd/0x70 [ 500.047199] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 500.052238] ? selinux_file_permission+0x92/0x550 [ 500.057101] ? security_file_permission+0x94/0x320 [ 500.062051] ? iter_file_splice_write+0xbe0/0xbe0 [ 500.067189] do_splice_to+0x12a/0x190 [ 500.071015] splice_direct_to_actor+0x2d2/0x970 [ 500.075714] ? generic_pipe_buf_nosteal+0x10/0x10 [ 500.080586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.086139] ? do_splice_to+0x190/0x190 [ 500.090135] ? rw_verify_area+0x118/0x360 [ 500.094350] do_splice_direct+0x1da/0x2a0 [ 500.098515] ? splice_direct_to_actor+0x970/0x970 [ 500.103374] ? rcu_read_lock_sched_held+0x110/0x130 [ 500.108398] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 500.113173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.118727] ? __sb_start_write+0x1ac/0x360 [ 500.123063] do_sendfile+0x597/0xd00 [ 500.126802] ? do_compat_pwritev64+0x1c0/0x1c0 [ 500.131400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 500.136955] ? fput+0x128/0x1a0 [ 500.140258] __x64_sys_sendfile64+0x1dd/0x220 [ 500.144774] ? __ia32_sys_sendfile+0x230/0x230 [ 500.149458] ? do_syscall_64+0x26/0x610 [ 500.153449] ? lockdep_hardirqs_on+0x415/0x5d0 [ 500.158047] ? trace_hardirqs_on+0x67/0x230 [ 500.162389] do_syscall_64+0x103/0x610 [ 500.166303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.171497] RIP: 0033:0x457e29 [ 500.174698] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.193637] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 500.201370] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 500.208658] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 500.216260] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 500.223552] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 500.230835] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 [ 500.238144] CPU: 0 PID: 27360 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #85 [ 500.245460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.254826] Call Trace: [ 500.257438] dump_stack+0x172/0x1f0 [ 500.261082] should_fail.cold+0xa/0x1b [ 500.264989] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 500.270107] ? lock_downgrade+0x810/0x810 [ 500.274273] ? ___might_sleep+0x163/0x280 [ 500.278437] __should_failslab+0x121/0x190 [ 500.282687] should_failslab+0x9/0x14 [ 500.286502] kmem_cache_alloc+0x2b2/0x6f0 [ 500.290669] ? __lock_acquire+0x53b/0x4700 [ 500.294935] mmu_topup_memory_caches+0x97/0x490 [ 500.299633] kvm_mmu_load+0x21/0x1200 [ 500.303452] ? mark_held_locks+0x100/0x100 [ 500.307704] ? handle_ept_misconfig+0x3e0/0x3e0 [ 500.312408] vcpu_enter_guest+0x3d72/0x6290 [ 500.316746] ? __mutex_lock+0x3cd/0x1310 [ 500.320827] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 500.325001] ? emulator_read_emulated+0x50/0x50 [ 500.329692] ? lock_acquire+0x16f/0x3f0 [ 500.333691] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 500.338732] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 500.343590] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 500.348634] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 500.352630] ? kvm_vcpu_block+0xcd0/0xcd0 [ 500.356796] ? mark_held_locks+0x100/0x100 [ 500.361049] ? proc_fail_nth_write+0x9d/0x1e0 [ 500.365566] ? proc_cwd_link+0x1d0/0x1d0 [ 500.369653] ? __f_unlock_pos+0x19/0x20 [ 500.373646] ? find_held_lock+0x35/0x130 [ 500.377759] ? __fget+0x340/0x540 [ 500.381329] ? find_held_lock+0x35/0x130 [ 500.385402] ? __fget+0x340/0x540 [ 500.388882] ? kvm_vcpu_block+0xcd0/0xcd0 [ 500.393043] do_vfs_ioctl+0xd6e/0x1390 [ 500.396947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.402507] ? selinux_file_ioctl+0x125/0x5e0 [ 500.407012] ? ioctl_preallocate+0x210/0x210 [ 500.411422] ? selinux_file_mprotect+0x620/0x620 [ 500.416189] ? iterate_fd+0x360/0x360 [ 500.419996] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 500.425527] ? fput+0x128/0x1a0 [ 500.428807] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.434345] ? security_file_ioctl+0x93/0xc0 [ 500.438759] ksys_ioctl+0xab/0xd0 [ 500.442271] __x64_sys_ioctl+0x73/0xb0 [ 500.446202] do_syscall_64+0x103/0x610 [ 500.450087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.455264] RIP: 0033:0x457e29 03:21:04 executing program 5 (fault-call:3 fault-nth:3): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:04 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)="52171bc9684cf2d66e0c4bc7dbe599b6f9a99758fc9a88948c8f1bffab84e5f4a5d8bda75b956ec175307fc5b14800884972f79ba18a5a9c6404849c3ab599ac3d655c41ae18ebee79182c4472bf8995997b209b62cf2b123d57801ae39e66e42345c437fd8d15ae") [ 500.458443] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.477337] RSP: 002b:00007effa9451c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.485043] RAX: ffffffffffffffda RBX: 00007effa9451c90 RCX: 0000000000457e29 [ 500.492355] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 500.499624] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 500.506887] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effa94526d4 [ 500.514150] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 [ 500.551427] FAULT_INJECTION: forcing a failure. [ 500.551427] name failslab, interval 1, probability 0, space 0, times 0 [ 500.564097] CPU: 0 PID: 27377 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 500.571398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.580779] Call Trace: [ 500.583398] dump_stack+0x172/0x1f0 [ 500.587048] should_fail.cold+0xa/0x1b [ 500.590952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 500.596074] ? lock_downgrade+0x810/0x810 [ 500.600244] ? ___might_sleep+0x163/0x280 [ 500.604407] __should_failslab+0x121/0x190 [ 500.608663] should_failslab+0x9/0x14 [ 500.612490] kmem_cache_alloc_node_trace+0x270/0x720 [ 500.617617] ? lock_downgrade+0x810/0x810 [ 500.621797] __kmalloc_node+0x3d/0x70 [ 500.625619] kvmalloc_node+0x68/0x100 [ 500.629439] iov_iter_get_pages_alloc+0x860/0x1260 [ 500.634388] ? unwind_get_return_address+0x61/0xa0 [ 500.639343] ? __save_stack_trace+0x8a/0xf0 [ 500.643687] ? iov_iter_revert+0xaa0/0xaa0 [ 500.647949] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 500.652987] ? iov_iter_pipe+0xba/0x2f0 [ 500.656985] default_file_splice_read+0x199/0x890 [ 500.661856] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 500.666982] ? kasan_kmalloc+0x9/0x10 [ 500.670794] ? __kmalloc+0x15c/0x740 [ 500.674522] ? alloc_pipe_info+0x199/0x430 [ 500.678775] ? do_sendfile+0x597/0xd00 [ 500.682678] ? do_syscall_64+0x103/0x610 [ 500.686750] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.692175] ? iter_file_splice_write+0xbe0/0xbe0 [ 500.697075] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 500.702555] ? __lock_is_held+0xb6/0x140 [ 500.706651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.712237] ? fsnotify+0x395/0xbd0 [ 500.715891] ? fsnotify+0xbd0/0xbd0 [ 500.719537] ? fsnotify_first_mark+0x210/0x210 [ 500.724145] ? avc_policy_seqno+0xd/0x70 [ 500.728244] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 500.733291] ? selinux_file_permission+0x92/0x550 [ 500.738186] ? security_file_permission+0x94/0x320 [ 500.743148] ? iter_file_splice_write+0xbe0/0xbe0 [ 500.748034] do_splice_to+0x12a/0x190 [ 500.751866] splice_direct_to_actor+0x2d2/0x970 [ 500.756562] ? generic_pipe_buf_nosteal+0x10/0x10 [ 500.761442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.767005] ? do_splice_to+0x190/0x190 [ 500.771003] ? rw_verify_area+0x118/0x360 [ 500.775181] do_splice_direct+0x1da/0x2a0 [ 500.779351] ? splice_direct_to_actor+0x970/0x970 [ 500.784218] ? rcu_read_lock_sched_held+0x110/0x130 [ 500.789259] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 500.794046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.799620] ? __sb_start_write+0x1ac/0x360 [ 500.803969] do_sendfile+0x597/0xd00 [ 500.807719] ? do_compat_pwritev64+0x1c0/0x1c0 [ 500.812332] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 500.817916] ? fput+0x128/0x1a0 [ 500.821239] __x64_sys_sendfile64+0x1dd/0x220 [ 500.825939] ? __ia32_sys_sendfile+0x230/0x230 [ 500.830635] ? do_syscall_64+0x26/0x610 [ 500.834635] ? lockdep_hardirqs_on+0x415/0x5d0 [ 500.839239] ? trace_hardirqs_on+0x67/0x230 [ 500.843586] do_syscall_64+0x103/0x610 [ 500.847493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.852694] RIP: 0033:0x457e29 [ 500.855916] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.874830] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 500.882559] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 500.889846] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 03:21:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xfff, 0x80400) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 500.897136] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 500.904436] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 500.911718] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 [ 501.513727] device bridge_slave_1 left promiscuous mode [ 501.519295] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.574009] device bridge_slave_0 left promiscuous mode [ 501.579632] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.718435] device hsr_slave_1 left promiscuous mode [ 501.786316] device hsr_slave_0 left promiscuous mode [ 501.841015] team0 (unregistering): Port device team_slave_1 removed [ 501.861861] team0 (unregistering): Port device team_slave_0 removed [ 501.873734] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 501.889414] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 501.959015] bond0 (unregistering): Released all slaves [ 502.582867] net_ratelimit: 16 callbacks suppressed [ 502.582876] protocol 88fb is buggy, dev hsr_slave_0 [ 502.582899] protocol 88fb is buggy, dev hsr_slave_1 [ 502.587930] protocol 88fb is buggy, dev hsr_slave_1 [ 502.593078] protocol 88fb is buggy, dev hsr_slave_0 [ 502.608129] protocol 88fb is buggy, dev hsr_slave_1 [ 502.725258] IPVS: ftp: loaded support on port[0] = 21 [ 502.848743] chnl_net:caif_netlink_parms(): no params data found [ 502.895346] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.901824] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.915371] device bridge_slave_0 entered promiscuous mode [ 502.924311] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.930775] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.944563] device bridge_slave_1 entered promiscuous mode [ 502.980766] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 502.991382] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 503.021721] team0: Port device team_slave_0 added [ 503.029147] team0: Port device team_slave_1 added [ 503.125611] device hsr_slave_0 entered promiscuous mode [ 503.142880] protocol 88fb is buggy, dev hsr_slave_0 [ 503.147989] protocol 88fb is buggy, dev hsr_slave_1 [ 503.154044] device hsr_slave_1 entered promiscuous mode [ 503.270396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.284239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.291311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.302128] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.313912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.321962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.332706] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.339151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.354417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 503.369213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 503.378865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.382941] protocol 88fb is buggy, dev hsr_slave_0 [ 503.391250] protocol 88fb is buggy, dev hsr_slave_1 [ 503.392609] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.402682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.433179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 503.441895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.450005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.458040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.466537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.474966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.482993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.490545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.498282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.506080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.514307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.522337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.553853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.632901] protocol 88fb is buggy, dev hsr_slave_0 03:21:10 executing program 5 (fault-call:3 fault-nth:4): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x10000000}}, 0x14}}, 0x0) 03:21:10 executing program 4 (fault-call:5 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:10 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x3e, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x1bb}, 0x0) close(r0) 03:21:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\x9c\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xfc\xdb\x9f(\xd2\xb2\xfeP\xfa\xff\xd3;Xb\xf1X\xc6\x04\xc3\x04\xf7i6\xf4\x18\xc0g\xd8\xf6I\x0f\x8ezp\xfaC!\x13\x18\vT\x16\x8b\x02\x19o\x9cl\xe9cM\x03\x8c', 0xfffffffffffffffe) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)=0xffffffffffffff66) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 506.635385] FAULT_INJECTION: forcing a failure. [ 506.635385] name failslab, interval 1, probability 0, space 0, times 0 03:21:11 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r1) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 506.689816] CPU: 0 PID: 27403 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 506.697178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.706605] Call Trace: [ 506.709230] dump_stack+0x172/0x1f0 [ 506.712892] should_fail.cold+0xa/0x1b [ 506.716812] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 506.721942] ? lock_downgrade+0x810/0x810 [ 506.726125] ? ___might_sleep+0x163/0x280 [ 506.730934] __should_failslab+0x121/0x190 [ 506.735224] should_failslab+0x9/0x14 03:21:11 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x100, 0x4) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 506.739055] kmem_cache_alloc_node_trace+0x270/0x720 [ 506.744212] __kmalloc_node+0x3d/0x70 [ 506.748041] kvmalloc_node+0x68/0x100 [ 506.751869] seq_read+0x832/0x1130 [ 506.755445] kernfs_fop_read+0xed/0x560 [ 506.759461] ? rw_verify_area+0x118/0x360 [ 506.763642] do_iter_read+0x4a9/0x660 [ 506.767468] ? dup_iter+0x260/0x260 [ 506.771125] vfs_readv+0xf0/0x160 [ 506.774604] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 506.779987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 506.785558] ? push_pipe+0x417/0x7a0 03:21:11 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x6000, 0x7, 0x7}, 0x2}, 0x20, 0x1, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0x0, 0x100000000, 0x100, 0x2}, 0x14) close(r0) [ 506.789293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 506.794861] ? iov_iter_revert+0xaa0/0xaa0 [ 506.799120] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 506.804184] ? iov_iter_pipe+0xba/0x2f0 [ 506.808198] default_file_splice_read+0x475/0x890 [ 506.813061] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 506.818192] ? kasan_kmalloc+0x9/0x10 [ 506.822009] ? __kmalloc+0x15c/0x740 [ 506.825832] ? alloc_pipe_info+0x199/0x430 [ 506.830089] ? iter_file_splice_write+0xbe0/0xbe0 [ 506.834971] ? get_mem_cgroup_from_mm+0x10b/0x2b0 03:21:11 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5d1500, 0x0) getdents(r0, &(0x7f00000000c0)=""/167, 0xa7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='reiserfs\x00', 0x288400d, &(0x7f0000000240)='\x90vmnet1}^!\'user\x00') [ 506.839839] ? __lock_is_held+0xb6/0x140 [ 506.843938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 506.849503] ? fsnotify+0x395/0xbd0 [ 506.853154] ? fsnotify+0xbd0/0xbd0 [ 506.856823] ? fsnotify_first_mark+0x210/0x210 [ 506.861439] ? avc_policy_seqno+0xd/0x70 [ 506.865523] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 506.870559] ? selinux_file_permission+0x92/0x550 [ 506.878404] ? security_file_permission+0x94/0x320 [ 506.883366] ? iter_file_splice_write+0xbe0/0xbe0 [ 506.888242] do_splice_to+0x12a/0x190 [ 506.892076] splice_direct_to_actor+0x2d2/0x970 [ 506.896775] ? generic_pipe_buf_nosteal+0x10/0x10 [ 506.896859] cgroup: fork rejected by pids controller in /syz1 [ 506.901644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 506.901680] ? do_splice_to+0x190/0x190 [ 506.901701] ? rw_verify_area+0x118/0x360 [ 506.901721] do_splice_direct+0x1da/0x2a0 [ 506.925473] ? splice_direct_to_actor+0x970/0x970 [ 506.930345] ? rcu_read_lock_sched_held+0x110/0x130 [ 506.935384] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 506.940157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 506.945738] ? __sb_start_write+0x1ac/0x360 [ 506.950089] do_sendfile+0x597/0xd00 [ 506.953832] ? do_compat_pwritev64+0x1c0/0x1c0 [ 506.958448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 506.964010] ? fput+0x128/0x1a0 [ 506.967323] __x64_sys_sendfile64+0x1dd/0x220 [ 506.971846] ? __ia32_sys_sendfile+0x230/0x230 [ 506.976451] ? do_syscall_64+0x26/0x610 [ 506.980442] ? lockdep_hardirqs_on+0x415/0x5d0 [ 506.985043] ? trace_hardirqs_on+0x67/0x230 [ 506.989419] do_syscall_64+0x103/0x610 [ 506.993336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.998543] RIP: 0033:0x457e29 [ 507.001752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 507.020673] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 507.028408] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 03:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x3f000000}}, 0x14}}, 0x0) [ 507.035700] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 507.042990] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 507.050285] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 507.057572] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 [ 507.079105] FAULT_INJECTION: forcing a failure. [ 507.079105] name failslab, interval 1, probability 0, space 0, times 0 [ 507.113416] CPU: 0 PID: 27432 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #85 [ 507.120756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.130129] Call Trace: [ 507.132761] dump_stack+0x172/0x1f0 [ 507.136419] should_fail.cold+0xa/0x1b [ 507.140326] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 507.145448] ? lock_downgrade+0x810/0x810 [ 507.149616] ? ___might_sleep+0x163/0x280 [ 507.153776] __should_failslab+0x121/0x190 [ 507.158032] should_failslab+0x9/0x14 [ 507.161849] kmem_cache_alloc+0x2b2/0x6f0 [ 507.166013] ? __lock_acquire+0x53b/0x4700 [ 507.170269] mmu_topup_memory_caches+0x97/0x490 [ 507.174965] kvm_mmu_load+0x21/0x1200 [ 507.178782] ? mark_held_locks+0x100/0x100 [ 507.183031] ? handle_ept_misconfig+0x3e0/0x3e0 [ 507.187728] vcpu_enter_guest+0x3d72/0x6290 [ 507.192069] ? __mutex_lock+0x3cd/0x1310 [ 507.196152] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 507.200341] ? emulator_read_emulated+0x50/0x50 [ 507.205027] ? lock_acquire+0x16f/0x3f0 [ 507.209023] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 507.214068] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 507.218932] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 507.224008] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 507.228008] ? kvm_vcpu_block+0xcd0/0xcd0 [ 507.232189] ? mark_held_locks+0x100/0x100 [ 507.236444] ? proc_fail_nth_write+0x9d/0x1e0 [ 507.240964] ? proc_cwd_link+0x1d0/0x1d0 [ 507.245044] ? __f_unlock_pos+0x19/0x20 [ 507.249038] ? find_held_lock+0x35/0x130 [ 507.253112] ? __fget+0x340/0x540 [ 507.256578] ? find_held_lock+0x35/0x130 [ 507.260653] ? __fget+0x340/0x540 [ 507.264127] ? kvm_vcpu_block+0xcd0/0xcd0 [ 507.268298] do_vfs_ioctl+0xd6e/0x1390 [ 507.272208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.277762] ? selinux_file_ioctl+0x125/0x5e0 [ 507.282277] ? ioctl_preallocate+0x210/0x210 [ 507.286708] ? selinux_file_mprotect+0x620/0x620 [ 507.291493] ? iterate_fd+0x360/0x360 [ 507.295317] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 507.301520] ? fput+0x128/0x1a0 [ 507.304823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.310380] ? security_file_ioctl+0x93/0xc0 [ 507.314810] ksys_ioctl+0xab/0xd0 [ 507.318288] __x64_sys_ioctl+0x73/0xb0 [ 507.322211] do_syscall_64+0x103/0x610 [ 507.326128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.331346] RIP: 0033:0x457e29 [ 507.334552] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 507.353781] RSP: 002b:00007effa9430c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.361519] RAX: ffffffffffffffda RBX: 00007effa9430c90 RCX: 0000000000457e29 [ 507.368901] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 507.376205] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 507.383496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effa94316d4 [ 507.390790] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 03:21:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:11 executing program 5 (fault-call:3 fault-nth:5): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x60000000}}, 0x14}}, 0x0) 03:21:11 executing program 4 (fault-call:5 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000600)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8ba\xa3P\x86\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce4\xd6\xfe7\x0f\x00\x00$\xce \xabN\xae\x1c\x1bAK\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa8\xcd\xec\r\n\x90n\xfc\xfe-\x86\r#\x1f\x9b\xa7t4k\xe7!\f\xed\x90D\xee\x98e]\a\xe7\xa9\xfb\x90\xd7\xbef\xd4\x16\'\x1e\xd5,#\xaa\xdaH9\xfcy\xacI\xda\x80\r6\x87\x99\x8f\xa4\xe2+ij\xa4', 0x1) write(r3, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4080, 0x0) getpeername$netrom(r4, &(0x7f0000000200)={{0x3, @rose}, [@default, @rose, @remote, @netrom, @remote, @remote, @default, @netrom]}, &(0x7f0000000180)=0x48) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000280)="3c5a909cc245d4205819d0ef28be52b81d06efe4c75fc84543afe1f35b1d5085f5ffdeae767352a4c3a251659c7cf36de7184922f2a5df54652d19b3706be5eb91ebbd1f0539afb9798cbe791c24ce854ed719862588f0787c2b37baf936221f6caba61f9dd4abff139ee5a8a628e4f59d52df96cf9637494e23108ad73d3324b9ea8dceb463e59861860be52fbad2e13fb73b501bd377abc0a698a2d72064af8e893d344067753b9d7eb6de7f1a6b1d1ec616fb2d92122e6b4a390487e4cf76dac44d4936227da3178ef3640131a32345fa255574adb6ce3be3") [ 507.679896] FAULT_INJECTION: forcing a failure. [ 507.679896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.691760] CPU: 1 PID: 27458 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 507.699049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.708432] Call Trace: [ 507.711048] dump_stack+0x172/0x1f0 [ 507.714718] should_fail.cold+0xa/0x1b [ 507.718640] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 507.723774] ? mark_held_locks+0x100/0x100 [ 507.728052] should_fail_alloc_page+0x50/0x60 [ 507.732594] __alloc_pages_nodemask+0x1a1/0x710 [ 507.737274] ? find_held_lock+0x35/0x130 [ 507.741359] ? __alloc_pages_slowpath+0x2900/0x2900 [ 507.746407] cache_grow_begin+0x9c/0x8c0 [ 507.750482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 507.756039] ? check_preemption_disabled+0x48/0x290 [ 507.761076] kmem_cache_alloc_node_trace+0x658/0x720 [ 507.766208] __kmalloc_node+0x3d/0x70 [ 507.770026] kvmalloc_node+0x68/0x100 [ 507.773844] seq_read+0x832/0x1130 [ 507.777407] kernfs_fop_read+0xed/0x560 [ 507.781400] ? rw_verify_area+0x118/0x360 [ 507.785560] do_iter_read+0x4a9/0x660 [ 507.789375] ? dup_iter+0x260/0x260 [ 507.793027] vfs_readv+0xf0/0x160 [ 507.796495] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 507.801885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 507.807437] ? push_pipe+0x417/0x7a0 [ 507.811184] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 507.816751] ? iov_iter_revert+0xaa0/0xaa0 [ 507.821010] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 507.826061] ? iov_iter_pipe+0xba/0x2f0 [ 507.830054] default_file_splice_read+0x475/0x890 [ 507.834911] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 507.840019] ? kasan_kmalloc+0x9/0x10 [ 507.843827] ? __kmalloc+0x15c/0x740 [ 507.847548] ? alloc_pipe_info+0x199/0x430 [ 507.851851] ? iter_file_splice_write+0xbe0/0xbe0 [ 507.856717] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 507.861571] ? __lock_is_held+0xb6/0x140 [ 507.865653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.871211] ? fsnotify+0x395/0xbd0 [ 507.874852] ? fsnotify+0xbd0/0xbd0 [ 507.878495] ? fsnotify_first_mark+0x210/0x210 [ 507.883094] ? avc_policy_seqno+0xd/0x70 [ 507.887178] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 507.892220] ? selinux_file_permission+0x92/0x550 [ 507.897088] ? security_file_permission+0x94/0x320 [ 507.902034] ? iter_file_splice_write+0xbe0/0xbe0 [ 507.906893] do_splice_to+0x12a/0x190 [ 507.910715] splice_direct_to_actor+0x2d2/0x970 [ 507.915404] ? generic_pipe_buf_nosteal+0x10/0x10 [ 507.920263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.925813] ? do_splice_to+0x190/0x190 [ 507.929798] ? rw_verify_area+0x118/0x360 [ 507.933964] do_splice_direct+0x1da/0x2a0 [ 507.939263] ? splice_direct_to_actor+0x970/0x970 [ 507.939284] ? rcu_read_lock_sched_held+0x110/0x130 [ 507.949156] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 507.959770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.965332] ? __sb_start_write+0x1ac/0x360 [ 507.969677] do_sendfile+0x597/0xd00 [ 507.973432] ? do_compat_pwritev64+0x1c0/0x1c0 [ 507.978032] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 507.983583] ? fput+0x128/0x1a0 [ 507.986884] __x64_sys_sendfile64+0x1dd/0x220 [ 507.991397] ? __ia32_sys_sendfile+0x230/0x230 [ 507.996009] ? do_syscall_64+0x26/0x610 [ 507.999998] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.004594] ? trace_hardirqs_on+0x67/0x230 [ 508.008944] do_syscall_64+0x103/0x610 [ 508.012857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 508.018057] RIP: 0033:0x457e29 [ 508.021258] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.040182] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 508.047912] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 508.055198] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 508.062485] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 508.069776] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 508.077059] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 03:21:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xffffff7f}}, 0x14}}, 0x0) [ 508.102872] net_ratelimit: 29 callbacks suppressed [ 508.102882] protocol 88fb is buggy, dev hsr_slave_0 [ 508.113046] protocol 88fb is buggy, dev hsr_slave_1 03:21:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:21:12 executing program 5 (fault-call:3 fault-nth:6): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 508.264824] *** Guest State *** [ 508.268433] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 508.282967] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 508.292228] CR3 = 0x0000000000000000 [ 508.296604] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 03:21:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 508.314221] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 508.353023] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 508.371678] FAULT_INJECTION: forcing a failure. [ 508.371678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.383551] CPU: 0 PID: 27486 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 508.390838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.395904] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.400206] Call Trace: [ 508.400241] dump_stack+0x172/0x1f0 [ 508.400265] should_fail.cold+0xa/0x1b [ 508.418328] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 508.423445] ? mark_held_locks+0x100/0x100 [ 508.427703] should_fail_alloc_page+0x50/0x60 [ 508.432219] __alloc_pages_nodemask+0x1a1/0x710 [ 508.436902] ? find_held_lock+0x35/0x130 [ 508.440994] ? __alloc_pages_slowpath+0x2900/0x2900 [ 508.446049] cache_grow_begin+0x9c/0x8c0 [ 508.450126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 508.455698] ? check_preemption_disabled+0x48/0x290 [ 508.460737] kmem_cache_alloc_node_trace+0x658/0x720 [ 508.465875] __kmalloc_node+0x3d/0x70 [ 508.469693] kvmalloc_node+0x68/0x100 [ 508.473510] seq_read+0x832/0x1130 [ 508.477083] kernfs_fop_read+0xed/0x560 [ 508.481069] ? rw_verify_area+0x118/0x360 [ 508.485242] do_iter_read+0x4a9/0x660 [ 508.488762] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.489053] ? dup_iter+0x260/0x260 [ 508.500664] vfs_readv+0xf0/0x160 [ 508.504131] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 508.509526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 508.515095] ? push_pipe+0x417/0x7a0 [ 508.518829] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 508.524399] ? iov_iter_revert+0xaa0/0xaa0 [ 508.528743] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 508.533795] ? iov_iter_pipe+0xba/0x2f0 [ 508.537794] default_file_splice_read+0x475/0x890 [ 508.542664] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 508.547783] ? kasan_kmalloc+0x9/0x10 [ 508.550693] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.551594] ? __kmalloc+0x15c/0x740 [ 508.551613] ? alloc_pipe_info+0x199/0x430 [ 508.567546] ? iter_file_splice_write+0xbe0/0xbe0 [ 508.572408] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 508.577267] ? __lock_is_held+0xb6/0x140 [ 508.581351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.586902] ? fsnotify+0x395/0xbd0 [ 508.590555] ? fsnotify+0xbd0/0xbd0 [ 508.594218] ? fsnotify_first_mark+0x210/0x210 [ 508.598825] ? avc_policy_seqno+0xd/0x70 [ 508.602900] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 508.607940] ? selinux_file_permission+0x92/0x550 [ 508.612806] ? security_file_permission+0x94/0x320 [ 508.617763] ? iter_file_splice_write+0xbe0/0xbe0 [ 508.619663] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.622616] do_splice_to+0x12a/0x190 [ 508.622640] splice_direct_to_actor+0x2d2/0x970 [ 508.622659] ? generic_pipe_buf_nosteal+0x10/0x10 [ 508.643944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.649497] ? do_splice_to+0x190/0x190 [ 508.653483] ? rw_verify_area+0x118/0x360 [ 508.657650] do_splice_direct+0x1da/0x2a0 [ 508.661812] ? splice_direct_to_actor+0x970/0x970 [ 508.666674] ? rcu_read_lock_sched_held+0x110/0x130 [ 508.671704] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 508.676476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.682034] ? __sb_start_write+0x1ac/0x360 [ 508.686381] do_sendfile+0x597/0xd00 [ 508.690153] ? do_compat_pwritev64+0x1c0/0x1c0 [ 508.694781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 508.700338] ? fput+0x128/0x1a0 [ 508.703243] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.703645] __x64_sys_sendfile64+0x1dd/0x220 [ 508.716121] ? __ia32_sys_sendfile+0x230/0x230 [ 508.720723] ? do_syscall_64+0x26/0x610 [ 508.724706] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.729305] ? trace_hardirqs_on+0x67/0x230 [ 508.733643] do_syscall_64+0x103/0x610 [ 508.737636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 508.742826] RIP: 0033:0x457e29 [ 508.746026] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.764940] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 508.772672] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 508.779958] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 508.787236] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 508.793136] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.794509] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 508.794519] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 [ 508.848541] GDTR: limit=0x00000000, base=0x0000000000000000 [ 508.866764] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:21:13 executing program 5 (fault-call:3 fault-nth:7): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 508.891697] IDTR: limit=0x00000000, base=0x0000000000000000 [ 508.939634] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 508.980779] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 509.015848] FAULT_INJECTION: forcing a failure. [ 509.015848] name failslab, interval 1, probability 0, space 0, times 0 [ 509.041337] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 509.056334] CPU: 0 PID: 27495 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 509.063685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.073060] Call Trace: [ 509.075692] dump_stack+0x172/0x1f0 [ 509.079354] should_fail.cold+0xa/0x1b [ 509.083272] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 509.088405] ? lock_downgrade+0x810/0x810 [ 509.092574] ? ___might_sleep+0x163/0x280 [ 509.096738] __should_failslab+0x121/0x190 [ 509.100988] should_failslab+0x9/0x14 [ 509.104805] __kmalloc_track_caller+0x2d8/0x740 [ 509.109495] ? lock_downgrade+0x810/0x810 [ 509.113658] ? alloc_trial_cpuset+0x27/0x250 [ 509.118090] kmemdup+0x27/0x60 [ 509.121311] alloc_trial_cpuset+0x27/0x250 [ 509.125577] cpuset_write_resmask+0x1ba/0x2040 [ 509.130245] ? cpuset_css_offline+0x210/0x210 [ 509.134765] ? lock_acquire+0x16f/0x3f0 [ 509.138758] ? kernfs_fop_write+0x227/0x480 [ 509.143102] cgroup_file_write+0x245/0x7a0 [ 509.147358] ? cpuset_css_offline+0x210/0x210 [ 509.151866] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 509.156816] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 509.161782] kernfs_fop_write+0x2ba/0x480 [ 509.165949] ? lock_downgrade+0x810/0x810 [ 509.170114] __vfs_write+0x116/0x8e0 [ 509.173842] ? kernfs_fop_open+0xd90/0xd90 [ 509.178096] ? kernel_read+0x120/0x120 [ 509.181998] ? kfree+0x173/0x230 [ 509.185382] ? kvfree+0x61/0x70 [ 509.188672] ? kfree+0x173/0x230 [ 509.192055] ? __lock_is_held+0xb6/0x140 [ 509.196144] __kernel_write+0x110/0x3b0 [ 509.200151] write_pipe_buf+0x15d/0x1f0 [ 509.204199] ? do_splice_direct+0x2a0/0x2a0 [ 509.208536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 509.214550] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 509.219944] __splice_from_pipe+0x39a/0x7e0 [ 509.224292] ? do_splice_direct+0x2a0/0x2a0 [ 509.228636] ? do_splice_direct+0x2a0/0x2a0 [ 509.232976] splice_from_pipe+0x108/0x170 [ 509.237149] ? splice_shrink_spd+0xd0/0xd0 [ 509.241452] ? security_file_permission+0x94/0x320 [ 509.246408] default_file_splice_write+0x3c/0x90 [ 509.251190] ? generic_splice_sendpage+0x50/0x50 [ 509.255967] direct_splice_actor+0x126/0x1a0 [ 509.260396] splice_direct_to_actor+0x369/0x970 [ 509.265087] ? generic_pipe_buf_nosteal+0x10/0x10 [ 509.269946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 509.275501] ? do_splice_to+0x190/0x190 [ 509.279493] ? rw_verify_area+0x118/0x360 [ 509.283656] do_splice_direct+0x1da/0x2a0 [ 509.287829] ? splice_direct_to_actor+0x970/0x970 [ 509.292692] ? rcu_read_lock_sched_held+0x110/0x130 [ 509.297724] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 509.302492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 509.308050] ? __sb_start_write+0x1ac/0x360 [ 509.312396] do_sendfile+0x597/0xd00 [ 509.316140] ? do_compat_pwritev64+0x1c0/0x1c0 [ 509.320757] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 509.326318] ? fput+0x128/0x1a0 [ 509.329620] __x64_sys_sendfile64+0x1dd/0x220 [ 509.334135] ? __ia32_sys_sendfile+0x230/0x230 [ 509.338747] ? do_syscall_64+0x26/0x610 [ 509.343091] ? lockdep_hardirqs_on+0x415/0x5d0 [ 509.347690] ? trace_hardirqs_on+0x67/0x230 [ 509.352033] do_syscall_64+0x103/0x610 [ 509.355944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.361144] RIP: 0033:0x457e29 [ 509.364362] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.383280] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 509.391014] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 509.398305] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 509.405592] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 509.412878] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 509.420168] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 [ 509.428043] protocol 88fb is buggy, dev hsr_slave_0 [ 509.433208] protocol 88fb is buggy, dev hsr_slave_1 [ 509.433637] protocol 88fb is buggy, dev hsr_slave_0 [ 509.443479] protocol 88fb is buggy, dev hsr_slave_1 [ 509.449880] protocol 88fb is buggy, dev hsr_slave_0 [ 509.451268] Interruptibility = 00000000 ActivityState = 00000000 [ 509.455058] protocol 88fb is buggy, dev hsr_slave_1 [ 509.461930] *** Host State *** [ 509.468218] protocol 88fb is buggy, dev hsr_slave_0 [ 509.475510] protocol 88fb is buggy, dev hsr_slave_1 [ 509.477674] RIP = 0xffffffff811b34c0 RSP = 0xffff88809ae378b8 [ 509.490414] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 509.500469] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 509.511828] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 509.521157] CR0=0000000080050033 CR3=0000000096a7e000 CR4=00000000001426f0 [ 509.531713] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 509.541803] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 509.551942] *** Control State *** [ 509.558801] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 509.569722] EntryControls=0000d3ff ExitControls=002fefff [ 509.578628] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 509.589034] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 509.599146] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 509.609203] reason=80000021 qualification=0000000000000000 [ 509.618943] IDTVectoring: info=00000000 errcode=00000000 [ 509.627797] TSC Offset = 0xfffffeed66b23a3a [ 509.632328] EPT pointer = 0x000000008872701e [ 511.617601] IPVS: ftp: loaded support on port[0] = 21 [ 511.683432] device bridge_slave_1 left promiscuous mode [ 511.688945] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.733714] device bridge_slave_0 left promiscuous mode [ 511.739216] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.542889] net_ratelimit: 16 callbacks suppressed [ 513.542899] protocol 88fb is buggy, dev hsr_slave_0 [ 513.553026] protocol 88fb is buggy, dev hsr_slave_1 [ 513.622937] protocol 88fb is buggy, dev hsr_slave_0 [ 513.628059] protocol 88fb is buggy, dev hsr_slave_1 [ 513.633311] protocol 88fb is buggy, dev hsr_slave_0 [ 513.638391] protocol 88fb is buggy, dev hsr_slave_1 [ 513.782939] protocol 88fb is buggy, dev hsr_slave_0 [ 513.788107] protocol 88fb is buggy, dev hsr_slave_1 [ 514.342934] protocol 88fb is buggy, dev hsr_slave_0 [ 514.348181] protocol 88fb is buggy, dev hsr_slave_1 [ 515.024701] device hsr_slave_1 left promiscuous mode [ 515.098262] device hsr_slave_0 left promiscuous mode [ 515.158059] team0 (unregistering): Port device team_slave_1 removed [ 515.168868] team0 (unregistering): Port device team_slave_0 removed [ 515.179512] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 515.239003] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 515.328715] bond0 (unregistering): Released all slaves [ 515.449627] chnl_net:caif_netlink_parms(): no params data found [ 515.480940] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.489452] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.496625] device bridge_slave_0 entered promiscuous mode [ 515.504989] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.511391] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.518745] device bridge_slave_1 entered promiscuous mode [ 515.532992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 515.542222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 515.561392] team0: Port device team_slave_0 added [ 515.567696] team0: Port device team_slave_1 added [ 515.635692] device hsr_slave_0 entered promiscuous mode [ 515.683270] device hsr_slave_1 entered promiscuous mode [ 515.747143] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.753551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.760139] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.766562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.800926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.837250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.844840] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.851738] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.859376] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 515.871641] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.882068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.890474] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.896942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.915985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.924383] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.930751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.954826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.963649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.971555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.979924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.989633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.997940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 516.021053] 8021q: adding VLAN 0 to HW filter on device batadv0 03:21:20 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x1000, 0x5) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1) close(r0) socket$rds(0x15, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x7f}, 0x10) 03:21:20 executing program 5 (fault-call:3 fault-nth:8): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) r3 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f0000000380)='`', 0x1) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0xa80) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000180)={0xe9, 0x4}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000080)) ptrace$setregset(0x4204, r2, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 03:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x2, 0x0) 03:21:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x40030000000000}}, 0x14}}, 0x0) [ 516.147538] FAULT_INJECTION: forcing a failure. [ 516.147538] name failslab, interval 1, probability 0, space 0, times 0 [ 516.208076] CPU: 0 PID: 27516 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 516.215766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.225137] Call Trace: [ 516.234660] dump_stack+0x172/0x1f0 [ 516.238327] should_fail.cold+0xa/0x1b [ 516.242236] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 516.242255] ? lock_downgrade+0x810/0x810 [ 516.242274] ? ___might_sleep+0x163/0x280 03:21:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x100000000000000}}, 0x14}}, 0x0) [ 516.242292] __should_failslab+0x121/0x190 [ 516.259929] should_failslab+0x9/0x14 [ 516.263749] kmem_cache_alloc_node_trace+0x270/0x720 [ 516.268874] ? mark_held_locks+0x100/0x100 [ 516.268899] __kmalloc_node+0x3d/0x70 [ 516.268920] kvmalloc_node+0x68/0x100 [ 516.268940] iov_iter_get_pages_alloc+0x860/0x1260 [ 516.268960] ? iov_iter_revert+0xaa0/0xaa0 [ 516.289955] ? lockdep_hardirqs_on+0x415/0x5d0 [ 516.289974] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 516.289990] ? iov_iter_pipe+0xba/0x2f0 [ 516.290012] default_file_splice_read+0x199/0x890 [ 516.290030] ? free_unref_page+0x476/0x600 [ 516.299668] ? __put_page+0x8d/0xd0 [ 516.299692] ? trace_hardirqs_on+0x67/0x230 [ 516.299710] ? iter_file_splice_write+0xbe0/0xbe0 [ 516.299732] ? __lock_is_held+0xb6/0x140 [ 516.299752] ? generic_pipe_buf_release+0x105/0x160 [ 516.308586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 516.308603] ? fsnotify+0x395/0xbd0 [ 516.308623] ? fsnotify+0xbd0/0xbd0 [ 516.308639] ? fsnotify_first_mark+0x210/0x210 [ 516.308657] ? avc_policy_seqno+0xd/0x70 [ 516.334752] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 516.334774] ? selinux_file_permission+0x92/0x550 [ 516.334798] ? security_file_permission+0x94/0x320 [ 516.334822] ? iter_file_splice_write+0xbe0/0xbe0 [ 516.334841] do_splice_to+0x12a/0x190 [ 516.334860] splice_direct_to_actor+0x2d2/0x970 [ 516.334878] ? generic_pipe_buf_nosteal+0x10/0x10 [ 516.389652] ? do_splice_to+0x190/0x190 [ 516.393659] ? rw_verify_area+0x118/0x360 [ 516.397837] do_splice_direct+0x1da/0x2a0 [ 516.402203] ? splice_direct_to_actor+0x970/0x970 [ 516.407070] ? rcu_read_lock_sched_held+0x110/0x130 [ 516.412107] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 516.416879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 516.422436] ? __sb_start_write+0x1ac/0x360 [ 516.426779] do_sendfile+0x597/0xd00 [ 516.430528] ? do_compat_pwritev64+0x1c0/0x1c0 [ 516.435137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 516.440715] ? fput+0x128/0x1a0 [ 516.444023] __x64_sys_sendfile64+0x1dd/0x220 [ 516.448539] ? __ia32_sys_sendfile+0x230/0x230 [ 516.453145] ? do_syscall_64+0x26/0x610 [ 516.457154] ? lockdep_hardirqs_on+0x415/0x5d0 [ 516.461788] ? trace_hardirqs_on+0x67/0x230 [ 516.466148] do_syscall_64+0x103/0x610 [ 516.470338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 516.475562] RIP: 0033:0x457e29 [ 516.478772] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 516.497777] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:21:20 executing program 1: r0 = socket$inet(0x2, 0x5, 0x8ffffff) shutdown(r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/l2cap\x00') r2 = gettid() r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x5, 0x6, r2, 0x0, r3, 0x0, 0x4, 0x8}) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022dbd7000ffdbdf25010000000000000008410000004c00180000040173797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) [ 516.505525] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 516.512813] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 516.520108] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 516.527399] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 516.534690] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 0000000000000006 03:21:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x200000000000000}}, 0x14}}, 0x0) 03:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 03:21:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:21 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xcc, r2, 0x401, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x941}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff92ab0d5a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffffc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xaed}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) shutdown(r0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000300)=0x78) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:21 executing program 5 (fault-call:3 fault-nth:9): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x300000000000000}}, 0x14}}, 0x0) 03:21:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x3f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 03:21:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet(0x2, 0x80001, 0x84) shutdown(r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r1) [ 517.040294] cgroup: fork rejected by pids controller in /syz3 03:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4b49, 0x0) 03:21:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x400000000000000}}, 0x14}}, 0x0) 03:21:21 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000007f80), 0x0, 0x0, 0x158}, 0x0) close(r0) 03:21:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x800000000000000}}, 0x14}}, 0x0) 03:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x541b, 0x0) 03:21:21 executing program 2: r0 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002d0007031dfffd946fa28300cee60a0009030000000000000002000000000000", 0x24}], 0x1}, 0x0) 03:21:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:21 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x404000, 0x10a) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:21 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xe8) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0xfffffffffffffef0, 0x0}}], 0x400000000000167, 0x0) 03:21:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 518.582897] net_ratelimit: 26 callbacks suppressed [ 518.582906] protocol 88fb is buggy, dev hsr_slave_0 [ 518.593082] protocol 88fb is buggy, dev hsr_slave_1 [ 518.822900] protocol 88fb is buggy, dev hsr_slave_0 [ 518.828042] protocol 88fb is buggy, dev hsr_slave_1 [ 519.583952] device bridge_slave_1 left promiscuous mode [ 519.589473] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.643987] device bridge_slave_0 left promiscuous mode [ 519.649505] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.737719] bond1 (unregistering): Released all slaves [ 519.782990] protocol 88fb is buggy, dev hsr_slave_0 [ 519.788100] protocol 88fb is buggy, dev hsr_slave_1 [ 519.806345] device hsr_slave_1 left promiscuous mode [ 519.858443] device hsr_slave_0 left promiscuous mode [ 519.863200] protocol 88fb is buggy, dev hsr_slave_0 [ 519.868672] protocol 88fb is buggy, dev hsr_slave_1 [ 519.896548] team0 (unregistering): Port device team_slave_1 removed [ 519.909114] team0 (unregistering): Port device team_slave_0 removed [ 519.919772] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 519.950886] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 520.022872] protocol 88fb is buggy, dev hsr_slave_0 [ 520.028018] protocol 88fb is buggy, dev hsr_slave_1 [ 520.056772] bond0 (unregistering): Released all slaves [ 520.159276] IPVS: ftp: loaded support on port[0] = 21 [ 520.231254] chnl_net:caif_netlink_parms(): no params data found [ 520.265726] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.272271] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.279559] device bridge_slave_0 entered promiscuous mode [ 520.286850] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.293376] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.300644] device bridge_slave_1 entered promiscuous mode [ 520.320512] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 520.330329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.348944] team0: Port device team_slave_0 added [ 520.355573] team0: Port device team_slave_1 added [ 520.445665] device hsr_slave_0 entered promiscuous mode [ 520.513252] device hsr_slave_1 entered promiscuous mode [ 520.631126] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.637591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.644311] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.650692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.684851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.700073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.712392] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.722251] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.742644] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.767213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.775764] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.782146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.805799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.814845] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.821257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.829706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.838809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.856484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.863965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.871655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.880725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.906961] 8021q: adding VLAN 0 to HW filter on device batadv0 03:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x5421, 0x0) 03:21:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xa00000000000000}}, 0x14}}, 0x0) 03:21:25 executing program 1: r0 = socket$inet(0x2, 0x4080005, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) sendto$inet6(r1, &(0x7f0000000100)="94459abde81f37b1255c2e0031a7a8ddb96a806b7ee0511ce7aa77afb60ce1020ebfdfc5c498800d58cd2ba746a1244404ff2b457641d04a154c52e7a07e1c7b1c7e389fcb72329b458fad163f51f7c4844445052949c0159197fed090245d987fbae5c553e7a07a", 0x68, 0x1, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @empty, 0xff}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl(r2, 0x1000, &(0x7f0000000000)="018da33da4bbe264f91dd8c2e60d546ebc4ac69c9e768ccbdc6293a848dc4345ecf0abe6985c20e927227b58080cf435ab310ea757f4391ea533030228c4cf0edf0545bbc692d85a1c1e388374ba3a1a") close(r0) 03:21:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='|', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:21:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) 03:21:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1baf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x117) 03:21:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xe00000000000000}}, 0x14}}, 0x0) 03:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 03:21:25 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'hwsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "e3f3f92f50da29144ceee154575a39454e7b6555fbf2a7fde6b4615ab0e78230", "181567b0a578583383bf56b90f5322a84ae5baf50f107dc8ebf942596b7e9c95", "4308c76dd46e2ce32146105547d5969b042bb778d25ddfbdfa512f6d8900aa7b", "c91bf4231c590073ddc48d54a988080d0a31203b8922c4cbd3f60608a6d2bbf6", "eae2187fae92548bb36c44aac4754e40db7478a68da4db5fe9788f91694350e4", "5b960871721c28103292f676", 0x7, 0x9, 0xab, 0x0, 0xff}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x5450, 0x0) 03:21:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) 03:21:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xf00000000000000}}, 0x14}}, 0x0) 03:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x1000000000000000}}, 0x14}}, 0x0) 03:21:25 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) flistxattr(r0, &(0x7f0000000000)=""/87, 0x57) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x5451, 0x0) 03:21:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000100)={0x101, 0x100000000}) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r2) 03:21:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x6) 03:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7) 03:21:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x3f00000000000000}}, 0x14}}, 0x0) 03:21:26 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) fcntl$notify(r0, 0x402, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x1a, 0x4) 03:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9) 03:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x5452, 0x0) 03:21:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0x6000000000000000}}, 0x14}}, 0x0) 03:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa) 03:21:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x16000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:21:26 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x31) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82300102}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x10) 03:21:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xffffff7f00000000}}, 0x14}}, 0x0) 03:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 03:21:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb) 03:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xb4, 0x10000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/22) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 03:21:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5, 0x0, 0xffffffff00000000}}, 0x14}}, 0x0) 03:21:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffff58b, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, r1, {0xb, 0x5}, {0xf, 0x1f}, {0x6, 0xe}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$inet(0x2, 0x80001, 0x84) shutdown(r2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r2) 03:21:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 03:21:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc) 03:21:27 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000540)=0x1f, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) 03:21:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0xf}}, 0x0) 03:21:27 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x9) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getpeername(r0, &(0x7f0000000000)=@in={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0xffffffffffffffac) close(r0) 03:21:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd) 03:21:27 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0xc0}}, 0x0) 03:21:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) r2 = dup(r0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000040)={0xbb0000, 0x8f1, 0x400, [], &(0x7f0000000000)={0x9a091e, 0xfffffffffffff000, [], @ptr=0x1}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) 03:21:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 03:21:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000001380)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) bind$inet(r0, &(0x7f00000013c0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) shutdown(r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r1) 03:21:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xe) 03:21:27 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000084000000060000ffffffeb0000000000"], 0x18}, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 03:21:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0xec0}}, 0x0) 03:21:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10) 03:21:27 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback}}, 0xfff, 0x1, 0x10001, 0x80, 0x80}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x401}}}, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x7ff}, 0x8) close(r0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000300)) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x2100) 03:21:27 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x7fffffff) getdents(r0, 0x0, 0xfffffffffffffe0b) getdents(r0, 0x0, 0x0) 03:21:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 03:21:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x33fe0}}, 0x0) 03:21:28 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000840)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x6, 0x10}, &(0x7f0000000440)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000800)={0x10004, 0x8000}) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000007c0)) r2 = socket(0x1e, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x3, 0x2c9}, &(0x7f0000000480)=0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x00\x00\x00\x00\x00\x00\x00\x00\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}\xddHuI', 0x0, 0x0) syncfs(r0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 03:21:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x11) [ 523.942876] net_ratelimit: 24 callbacks suppressed [ 523.942884] protocol 88fb is buggy, dev hsr_slave_0 [ 523.952989] protocol 88fb is buggy, dev hsr_slave_1 [ 524.022894] protocol 88fb is buggy, dev hsr_slave_0 [ 524.028105] protocol 88fb is buggy, dev hsr_slave_1 03:21:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 03:21:28 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x200007d4}}, 0x0) 03:21:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 524.182863] protocol 88fb is buggy, dev hsr_slave_0 [ 524.188099] protocol 88fb is buggy, dev hsr_slave_1 03:21:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) 03:21:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x7ffff000}}, 0x0) 03:21:28 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x40087602, 0x0) 03:21:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) [ 524.706670] block nbd0: shutting down sockets 03:21:29 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000840)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x6, 0x10}, &(0x7f0000000440)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000800)={0x10004, 0x8000}) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000007c0)) r2 = socket(0x1e, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x3, 0x2c9}, &(0x7f0000000480)=0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x00\x00\x00\x00\x00\x00\x00\x00\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}\xddHuI', 0x0, 0x0) syncfs(r0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 03:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0xfffffdef}}, 0x0) 03:21:29 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xd31, 0x4) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x800) 03:21:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff888059cd3008) 03:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 524.822875] protocol 88fb is buggy, dev hsr_slave_0 [ 524.828018] protocol 88fb is buggy, dev hsr_slave_1 03:21:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x2}, 0x0) 03:21:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4100, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x400}}, 0x18) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_pepcpu_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) [ 525.063639] protocol 88fb is buggy, dev hsr_slave_0 [ 525.069329] protocol 88fb is buggy, dev hsr_slave_1 03:21:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:29 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) fdatasync(r0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2001, 0x8) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x8) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) 03:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x3}, 0x0) 03:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 525.567055] block nbd0: shutting down sockets 03:21:29 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8) fsetxattr$security_smack_transmute(r2, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) 03:21:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:29 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x44) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x8}, 0x0) 03:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 03:21:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xffff) 03:21:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x15}, 0x0) 03:21:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:30 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x563080, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 03:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 03:21:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) lstat(0x0, &(0x7f0000000980)) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x4e20, 0x5, 0x0, 0x6, 0xa, 0x80, 0x80, 0x2f}, {0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0x8000, 0x8}, {0x1000}, 0x0, 0x6e6bbb, 0x3, 0x0, 0x1}, {{@in6=@rand_addr="c41e09b97f8e98e003407115af1c62cf", 0x4d5}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0x0, 0xcb9, 0x3, 0x3}}, 0xe8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 03:21:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400200, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:30 executing program 1: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xfffffffffffffd58) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0xffffff1f}, 0x0) 03:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 03:21:30 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @remote}, &(0x7f0000000140)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000002c0)=""/133) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffefffb5) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) r4 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x87bb09c6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xed, 0x1, 0x1, 0x7, 0x0, 0x5, 0x8, 0x1, 0x1f000, 0xf66, 0x80, 0x7f, 0x1, 0x1, 0x2, 0x8, 0xffffffff, 0x9, 0x7ff, 0x3, 0x1f, 0x100000000, 0xfffffffffffffffe, 0xdf8, 0x80000001, 0x4, 0x1, 0x9e7, 0x8001, 0x6, 0x80, 0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff7, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0xc, 0x8, 0x1000000000000, 0x2, 0x2, 0x40, 0x100}, r5, 0x5, r1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r4, 0x0, 0x4) 03:21:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) 03:21:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:30 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r2, 0x2f, "dc3c92", "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"}}, 0x110) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002280)={@loopback, @remote, 0x0}, &(0x7f00000022c0)=0xc) sendmsg$nl_route(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002300)=@can_newroute={0x2b4, 0x18, 0x8, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x18, 0x2, {{{0x4, 0x80, 0x7fff, 0x9}, 0x0, 0x2, 0x0, 0x0, "6bfac31fa65ec211"}, 0x7}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x18, 0x3, {{{0x1, 0xffffffff00000001, 0x10001, 0x80000000}, 0x4, 0x2, 0x0, 0x0, "9c2198c719bfd921"}, 0x7}}, @CGW_CS_CRC8={0x120, 0x6, {0x25, 0x5, 0xb, 0x6, 0x8000, "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", 0x3, "9c012331a19b910bb35f265203df017e87315921"}}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_LIM_HOPS={0x8, 0xd, 0x9}, @CGW_CS_CRC8={0x120, 0x6, {0x49, 0x3c, 0x27, 0x1, 0x2, "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", 0x1, "99a47fcd1a05c82f16a570936cec273ac3578955"}}, @CGW_MOD_XOR={0x18, 0x3, {{{0x3, 0xbbe, 0xfffffffffffffffe, 0x1}, 0x1, 0x3, 0x0, 0x0, "b71bdbef9c86db84"}, 0x2}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x80) close(r0) 03:21:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x2}, 0x0) 03:21:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x90100, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x9, 0x6bd5de25, 0xfffffffffffffffb, 0xe4a3, 0x4, 0x9def, 0x4}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x20010, r1, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) 03:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 03:21:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:31 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e20, @multicast2}}) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100), 0x4) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default, @bpq0='bpq0\x00', 0x4, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00', 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) close(r0) 03:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x3}, 0x0) 03:21:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) syslog(0xa, &(0x7f00000000c0)=""/222, 0xde) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000001c0)=0x8) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xfc8f, 0x9, 0x2, 0x800}, {0x100, 0xfffffffffffffff7, 0x20, 0x3}]}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x9}, 0x8) 03:21:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000100)={0x5, 0x7f, 0xfffffffffffffdcf}) connect$llc(r1, &(0x7f00000000c0)={0x1e, 0x302, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x3]}, 0x10) close(r2) 03:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 03:21:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000000c0)) sendfile(r1, r2, 0x0, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0x1, 0x6, [], &(0x7f0000000140)=0x40}) write$FUSE_OPEN(r2, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x20) 03:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x4}, 0x0) 03:21:31 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000240)}, 0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7fff, 0x2000) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x80, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000", @ANYRES32=r2, @ANYBLOB="0000000000f0ffff0000000000f0ffffffffffff", @ANYRES32=r3, @ANYBLOB="00000000000000f0ffffffff0000000100000000", @ANYRES32=r4, @ANYBLOB="00711e7e000000df030000005e00f0ffffffff", @ANYRES32=r5, @ANYBLOB="0000000000000000010000000000000100000000"]) 03:21:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7, 0x80, 0x2, 0x3, 0x1f, 0x500, 0x0, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x2, 0x6, 0x9, 0x1, 0x81}}, &(0x7f00000001c0)=0xb0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r1, 0x0, 0x1000000, 0x10000c000}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0x6}, 0x8) r3 = getegid() setfsgid(r3) 03:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x8}, 0x0) 03:21:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:31 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000200)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="030109000000000200acd2df1e869abb34f7afcb0f2f089a5203c19a044a09244147f647851ce8326f30c45fdf817dd5d0805da6c6c47813eab7e247671c764ae9429dbdb1de4208a0be389e3a1c742d8368bac62b0c02c1b330f1ff93686bfca3380b5895837026452d68ba1b5dc0c5ab9b24031b7ac6cdf195d254bdc4387a6a2383731482f65fdaca8675c5af8e7aed2cba055dbdebfb0c33190b3e91638a0cfcfe3d00a6b33a584606674ca0ef20cd8b"], 0xb6, 0x3) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) 03:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x80087601, 0x0) 03:21:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) syz_mount_image$msdos(&(0x7f00000003c0)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="88052c9792d6bb72360fbc4e7fab2623c05f6012cb5fc9ad047d3023e8976f3f412d0f5304f7992f0bda83fb66d52d0d404955fbcc9769b17d8cd51ac6518cba9af8a6dea7f297a16dbcf90f2a9500972a10c5f3fcb37f4876046d404b90a50b10cdbe1f064e43e179e4ea5750c951e33af1a12e0447e325c9a58806aaa6394d002a0a6a05c9b0637abca5e93f75e97d4b9eb5d41de551ece9fe8f2c24b64b", 0x9f, 0x2}, {&(0x7f0000000380)="8042ce8f246d14992f731e78872c6d9e6150f0", 0x13, 0x7}, {&(0x7f0000000280)="7df56f3360a0a9f5923879ebd3df046ec9775bdad5ea038ecc98cd452fe203c20572e0848ee590ec50406692447f146f", 0x30, 0xffff}], 0x2000000, &(0x7f0000000340)={[{@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}], [{@context={'context', 0x3d, 'user_u'}}]}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0x1701, "edac6b7c2c0390b838ac5743b20ce48e5488d947c5a621a4", {0x6, 0xfffffffffffffffc}, 0x1}) syz_emit_ethernet(0x12, &(0x7f0000000200)={@link_local, @random="98985cbd8890", [], {@ipv6={0x86dd, {0x0, 0x6, "60c094", 0x10, 0x0, 0x0, @rand_addr="c8891f4d2d19b7d5e2f8573ecaef3163", @mcast2={0xff, 0x10}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3297d7", 0x0, 'a0*'}}}}}}}, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) 03:21:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0x3, "82fdf91fd73bd997181723947ca8bacbfb9f343d41a05be550ed55f087a38637", 0x3, 0x1}) 03:21:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:31 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x3, @empty, 'caif0\x00'}}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000280)="1d955086cf4a288a752cacaeb8acd17a0eb04352c32b62af9a5ddb42c59bb140ca1e00ad1b6129892da257f6cc54a0ccc0660000000000000000000000000000"}], 0x1, 0x0, 0x3b}, 0x0) close(r0) 03:21:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xa}, 0x0) [ 527.671381] FAT-fs (loop2): invalid media value (0x6d) [ 527.686706] FAT-fs (loop2): Can't find a valid FAT filesystem 03:21:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='\xfd\xff\xff\xff\xff\xff\xff\xff\xe4Lcg\x80\x00\xb1\x00\x00\xe2\xfer{\xdc\xedoy&\xbfE!\r*\x94|\xc0\xfb\xa1\\O\xdd\x86=\xb95\x02o[\xb7l\xbe\xcdx\xe8\xeb:\x1b\xb1s\xb9\x18K\xc5\f\x83t\t\"\xeb\xb9O\xe8\x85\"\xc4:\x1a\x89\x06{\x92\xa7\v\x9fQ\xdd\xc8\x11\xd0\x8d\xa9\xedZ<\"\xd4:I\xb4M\xe3\x88}%\xb0<0\rL\xae\xed\xd4\x99\xea\xeaV\x17h\x9e\xcb\x01^e\xe3\x1er\xb4m\xb0\\\x92 h=L\x9cC([\xf7\x12pL%#\v\xbf\xc0_\xc6\xe1\x9f\x04\xd1\x97\xb2CP\xfd,#\bU\xf4\x19\xe7\xac\x9c\"\xb1,Y\xfcp\x17\xbaY\x93\x99u\x14\xa4\xea\xdbC\xe3y\xaa\b\xb2\xe82E8\xbd\xf1\xc2\xb4\x9dy{\xe1\xbc\x18B\xa1LZ\xdf\xdf\xa6\x9a\xeam\xcfq;\x17f\x04\x8a\xbf\a\xc0xDh-\xc2Z\xf5cp\xa1\xaf\xfeg\xa7hH\b\x12', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000280)='cpuse\x941\x1eR\f\xe7\xcc\x0e\x822\x14\xca\x9att7\xb8\xf6(_.mems\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpj@\x91\xa7y\xe9\x1e\x9cm%mory]pressure\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x1) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/135, 0x87}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/227, 0xe3}], 0x9, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000005c0)) 03:21:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 03:21:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) syz_mount_image$msdos(&(0x7f00000003c0)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="88052c9792d6bb72360fbc4e7fab2623c05f6012cb5fc9ad047d3023e8976f3f412d0f5304f7992f0bda83fb66d52d0d404955fbcc9769b17d8cd51ac6518cba9af8a6dea7f297a16dbcf90f2a9500972a10c5f3fcb37f4876046d404b90a50b10cdbe1f064e43e179e4ea5750c951e33af1a12e0447e325c9a58806aaa6394d002a0a6a05c9b0637abca5e93f75e97d4b9eb5d41de551ece9fe8f2c24b64b", 0x9f, 0x2}, {&(0x7f0000000380)="8042ce8f246d14992f731e78872c6d9e6150f0", 0x13, 0x7}, {&(0x7f0000000280)="7df56f3360a0a9f5923879ebd3df046ec9775bdad5ea038ecc98cd452fe203c20572e0848ee590ec50406692447f146f", 0x30, 0xffff}], 0x2000000, &(0x7f0000000340)={[{@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}], [{@context={'context', 0x3d, 'user_u'}}]}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0x1701, "edac6b7c2c0390b838ac5743b20ce48e5488d947c5a621a4", {0x6, 0xfffffffffffffffc}, 0x1}) syz_emit_ethernet(0x12, &(0x7f0000000200)={@link_local, @random="98985cbd8890", [], {@ipv6={0x86dd, {0x0, 0x6, "60c094", 0x10, 0x0, 0x0, @rand_addr="c8891f4d2d19b7d5e2f8573ecaef3163", @mcast2={0xff, 0x10}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3297d7", 0x0, 'a0*'}}}}}}}, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) 03:21:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffe41}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090e000000000000f1b30e2d0005000600001f00000a00000000000e2c2cf000000000000000000000000000000000000000000000020001000000e4ffffffff010000000005000500000000000a00000000000000ff1700000000000000000080000000170000000000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xe}, 0x0) 03:21:32 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x7fffffff, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000240)="a3b1e526592a8c068b2fe2772112baded36363909772914132e4348531d569efdf59a9718b61f7013b111e68b40d1f3de4e863c51a18a4f7bb1a9d64", 0x3c, 0x6a0b0711}, {&(0x7f0000000280)="bd5bd583980c6351f2e1b1e321dd36830cd58c0793519e6bc220f61d7aadb90bf58df108c08b27d79cfa817aceb65f37f543a8ac8329fb6e271748c6396ae08de5792478ceb71507434ad91207cb", 0x4e, 0x91}, {&(0x7f0000000300)="ceb79364d976aee0baaff198b74fcd9f712b743d0dd64c308f380c274ae8edcde22cf85761ca75a2f3c72901054b34bee5b70119e0e25568e3c7b13c345045732908f4758c0127185a58046f014b699ab83407b2da49fcd26efc657c1ccf3c9d08a49ed46516ef34f58761db235571d73713", 0x72, 0x7fffffff}, {&(0x7f0000000380)="5560a1da2756a79b826c7f63e7a551da3b7d5e12ad185604ce4e1d3a5d4ff20df7816881270a49df4b6016ffeb213a442bcb9bc36e086e9dc0794941af21ef7a136f1f80344fda4f4568b65e72860adb25cbef142a54d55abdbc1b55031e3480021e40f34ca2c8d3ec2e28876330b104f4ebff47555e1dc1752410f805ace28546e5de32d36e85536a903d4f2b39eefe3b1e4868f0e4f9c5de09f830a0ac12b4681abae522a3ab20270b3a9e11afd8050ed36f869387", 0xb6, 0x985}, {&(0x7f0000000440)="db41d069356b01192ba30d85ac5eacf2c6ec789b954bc7b55e20aa09a618f37cebd1a4195c039eac598ee4940776db2bf0a82406cd725cebed843a18218aa2cfe7d867cf0656dedf9e47852cca483351570c58deb662c6d6dfbf89cc88d20a15b763718eb550402451cce38b900f91b6962eb72485d6bfe16aa9c3f268d4b4ac2c4ffb3603abac1f82e6d373ceb5ad1f5d8a91313b12233db2d60028f0b4b9ee10abfdc47d19332e042e487d4d0459469e6bd24d128987b037b249412b5aeccba15835173e182bb7cc8cd38c46c208b809dff14184c64f36", 0xd8, 0xcef}, {&(0x7f0000000540)="70e6d4b305f0e258b6b23c953903bc29a6e1bdbe9e2c9af6c299d506f380b292fd6bf4ba9fcdf2a8b30efa88b3f550a9f9e57178b5da2b326e43c7c28d1457f811ea6a4ddf2c8fd5cf8ac4560a8c343a9f448b8878dbba30db15233f830375d995f1e9fa6bb34cb8fadc0be8b4a3d5320d25b5be58f8bf819ded0f92fa6f85a852cc07be563b62e1e6a227e0d77a1703cd0b47ea57f2ff9bc9b5fa8d750dd2666a552c2a7594478198f7e8f03690d081c1d36e16e9959ba6b4f0e0b06b027ffe65b988e2aea6aa3239e7cd428ff5", 0xce}, {&(0x7f0000000640)="2169a5cc3f1151c706ecfa585c68d3104db13463659f17973d1ba320acb5eb3116ce82ae363d1b27286026915e16959feeeae0fadd133546f5e39a3baa0dc2acfeaeb9d170153b22fc1cf38485928a5bc37d25c9870ae76bb1da53c9127c14f103a0b9bbdd0ef9da2fdccc54f7cc1f6a68819a7db6c0c8339f6102ce63", 0x7d}], 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="61636c2c6e6f61636c2c6661756c745f696e6a656374696f6e3d3078303030303030303030303030303430302c757365725f78617474722c61636c2c6e6f757365725f78617474722c6e6f61636c2c6e6f61636c2c61636c2c6673757569643d35353177773777642d7b7638762d3f6439372d336667352d39776765770036672c66756e633d4d4f44554c455f434845434b2c6f626a5f757365723d2f6465762f6877726e67002c7569643d04a980b553ab3fa0c8186bf4ca48a1c48fe77cc39517d9cc716192a32d04aad8dc54d28c31c697a38536b5d353f416ec3a410570dac79c4ed0dc8086634296a98da3f3b87cf725d45054e4193b", @ANYRESDEC=r1, @ANYBLOB='ont_measure,smackfsroot=/dev/audio\x00,obj_role=/dev/audio\x00,appraise_type=imasig,subj_role=/dev/hwrng\x00,\x00']) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x801, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1ff000000000) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000008c0)) close(r0) [ 528.094191] FAT-fs (loop2): invalid media value (0x6d) 03:21:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 528.136947] FAT-fs (loop2): Can't find a valid FAT filesystem 03:21:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf}, 0x0) 03:21:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) 03:21:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000653fff)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000640)='\x00\x00\x00\x00]\xfd[2\xef<\xbc\xc7\xe3\xe3\xee\x11\x10\x8a>\xe3\xb0\xf8\xe2#rVS\vt\x16\x93\x9a\x95R\xed\xa0\xcbC\xd0g\x17W^\xf2\x04m\\\x89\x88\xe9p\xafL\xb3\x1c=\xf8\xa9\xb0\\\xbf\x98\xc9\xa0\xf99\xe0\xe8\xaa\xd3\x80\xc9\xf7\xb8Tf\x13\b\xdah\x1bq\xfd\xb8\xe7]\x92\xd8\xf8-\r\xa8\xcb\xb0\ay\x94\x7f4\xff\xff\xff\xff\xfe\xc9\xae\xacV(\x84\xc5QXF\xe5\xd0@j\xa8\xc9\xab\x88y\xb4\x9f\x8f\xa0\xf0') fcntl$getflags(r1, 0xb) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x0, 0x6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x101) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000002c0)=0x9, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = dup2(r2, r3) pwrite64(r3, &(0x7f0000000940)="ee535cdcc7c02f7470391de9d5efcf54844b0e1e99e75ac37954d6218248b1017b90cfb79844a0aab58b9d7f6663e0c2344e3d45696a4ba8d9ec294c3e9d925e231eba13bb7c81005df8288b8fcb0975d4b92b502df41ae3c52c754e45304bfeb271052c5ffe87653769d702310f5a9fd4bc8b1b2f011f590c3afcaf49d94a809722ee5508cb8100bc3749cec47e7cb82cfc79ac4b56fdf73e3cf9f9ece9a670432eccd91aaff6641cc4b71838a0a9d51e38261eb45216bb6f9148ae2dd284675ecf86f9ba1cd88a5e7675ba5733775d71f0459f7f24b6c3b75b4bc0a5059ccc73723631dc3d734e115f581c51f46061cc3587da1918aae88efc73bbe96df3fae871f292ebfdbe81964f2e37b539e49de5bc799bbfe7c5a2457b9d4a278b6d7a5baa14583a43709a8cb4488ead15e9f2c730987d7c7a38303c23451797e582d4d3a040ff2def757f832cd4a82984f81ea6183a2465bf9b0e86029c567f7eb6264f79a96129b23d418cfb53defce6c42526ef57cabdfc0e5c74c65323a41ef0c6f4db921d3c48b643d6ea90356828a94627830914687544eff35259582249f8267a955e27eeefa36b379c73dd5f1d27cec9ec349c5b98892ad44a4846f4029bf8ad06217912f78cd5216d9167db011dedf3584dae31d420d6dc9fed973f8632650e14b9692112f9953a2f2bcdfcd64a494556fbd3a84bd7c15ca67e25cf092922e3f29445a820835b1846791b53957b38dc2858f471a3f53e58b4b8d9aab4cc1c1af7b8feed66f1d3663e652ea94c29db8017c3f2cebc6b5fb87d09a14324be20e86ee1c20426539af9b6f54857ed559d134082f3d0298b98d00a69b71258cae67203f402e595340c48a3ec72454ed23a725d9743498475b695621cd626ade740b6f6a6f00f5ea7c4e81245ba8785e124153121fc8788f08f2f0037ced3fb87cd65e297c490e976a2e71bdee8232cbecde0a5e58b1b09d26897adebb90daa1bda3fce19939be3fec093ab4c7a554fa270b53921507b3250990f1e1cda402682b40fe2ad567ab2d4dc0d266eb216bb3f5e6187c104c01e0937d1332917b7a2468d77113016829fb0f48614bfb6c678df485b0a114998bedbf2ec60f4a6eed7fcda0763211311492d53b5ce6f100c22113e0c5f963723a42aa92fb1fe0a3346189c4db6499f2f420a7dbf10995a96a4868b557049fadaaf0ee1966c72deb64be73e0e06d36df08eab21e7fe411ef0f6f5b0a2eb9eb3e9aa387987e5ee13feb3c92ee487b6d186b91e026addf0caeb0fa0ae714e73236b478ee3e72d2adc9f0959b4c555314febfd0773bc04a86052cc1a2de59f06fc842cf8fca484725d67d9520e4689060f3d584b5f63ea8be79fd2cf42c99799d790aa3f7287e7cff1994515964c48565e99317627839f548502ea6caa3819f616ccbfa1c72e667e90fb0ee1b9f4bfaeb0f3638941d444118835de710f7aacae8baf0cc9843ece5ab4b961718d4e7c8424402594fd5f7dc8d0a80bc4f033551252e7311f0af2a265af963f872053c6c9b7491c3964d95a7ffbe07d8f5df2488af2eb070367233e366864bfc66a7eeab6f21b5d0a26281088c5743283c46667fb4410e5cd03d6a0d8ebd3bd130fa75bea8c1ada7e9eb8ed13985f278e4945a879848ef119d77f747f34efaa2f891d52107849bee2879add7681caf5a66df4474801797796d77d25bbbbb81db28c31d9a1eb92b83940a091f6b7ac3a13c56bddcc4f93b30ee0c180c1b195871285387088a835386f2785cca156767a6a2bc86e44dee689c1a528bb6e278189b7d18ccfdd8700436189e30c4fa2bcbadbc15ed94bc9b9c6cc20eebffd1e3350b8b0de943f4a6fadcd5d308a49b0035bd127c770cdff5791bea41c7b5808f62bc0d4d2e0ac8c05bb0e2d3060547c6ad69ee8a714ca8ad553530b980272369e270b076f225f0d919cfb8a7be3f4fce1440722748f334fb0f650f6871db6779c700c8b27887a0c8d3d3882d146b1e50ee4fc1f6f3d920d304483ad50b6f746de77c4db008f48a9c6996ed8e818ce15d8763584f9674ceb2758a079f40cbb2dcdb133b574c7b4399024997ed6bf43acb2aecd5578cf8d8a96cb32c0258ea4f56a7568f84c22af5209b2b579beb24bacc0353684d4ab93f3f0c41c5655afa9415fd02f2f81f9bd30dbeefd7daad11bc1f39bb79c7093cc62b4f840060e556ab67b0fc8214b65e889220425300b79a79df102928247786bd0f4ae205444ff7be2f619f11e6f1dcf6630cdb9424370015bf362d5f8edc9f7794ba6833c94aff1508a4b8f92a856c5beee5f952750a98ba7140f3786b31eae0e195b203a59d697ae5e53d1569ef9b4747445f4af7450ed5f8261613fe139da613ead472b2537f5482495044fe539f5dc2969a95c08cfb2d8c46ed5b6248a8133b0ca0092161e8133d49ee0b36fb0596749317fc9897cd22f5f51759a1d6f0cc51e5e276f1eafaa1669c5bd74b0625ba765156aebae3926041cf8beaea1c5a63d44228935ed3de63a57f0bf54d6e524ddb1d34bb634cc317336063e2476cafb36a772c67ba2658cd4dfa628e876117f5e1aed39e097050d16f18fd434ff17b47c3c31e5e7b1cc2b3c240488caf2cf21a10863d6a520e556f25c6044ba8cb3fcb5f0f173e2fdb29882e5aa3461c7cb50f8bcac306749e351ad0a660dee6cf3207f85ba7f83e74ec8bef8cdbf151af3681dbbe7b851c5a2869b09307a98c76bf80b0633e9102bcd58e48a433533208dc6df1d4cdb788c7ab35f1ec27dac64b0c3cb307d75415f7b065000d07644d9839813d0ac547b760b1b6377dcc05543a2ff0a5e992806e640f36ea06cdc9d22987b990357e0f9b6d094b9fb65e42db2436f8cece9c3bba2a580057ce0d4be3ee96f6dd6b2fb724dbc53beb08d75b9bb23d04c36524c40c3eff9fe256abcb2eb2b038b5b40f09c3ae6113e82acfca0b8039c162a4dae5e6e3cfa778b59882056af6abe2ef2aaa49afc79ec725a885d7686c3116525ba2b55ca26b5c28c90c6b349e3d8a4ed6f1db319748c1d9c47a4f5932d05f1fcb23ebdb49acdbcd3885853557c4283abeb8bfd8eebb9c18a4f078d86c35dccdc3bfc5141847cb4fb4eeab696d129d9bf752d812c284c475f3b23fd18061186a1896f287dcb3eabae552603296eb12bc5a4c5eaeb221a5f37562a638792b26ef0e6ad510db979b749335f4ef716745053499d56d4a076cf01abbdd7fdf9ba474b830630ab18b84e00b4ca66a81f99f59545cc8a547e44745197f849bf1d2038d6441290cff0275d9141e469158b1a7db51bd6bd951f594f9a04d921f8f022e983b00e4be5fd7b044021ad0314ab012b94385c979540176f4a0729e6fdecaee0b82798e28037d0dc32ae5e429b6375e5b1dceff7863d5dbc00b00790ae808b4a6a69118240ed53334685bdb674f248f22adc4a43caca8b5d9108887008d1b97369929d5828cb0fbd4a5542d7ae28ccc1a2815ce2a733e1ddf9b6da9eb24cc21b4ca172df19ae0df67bc103ee4d10c2bdb708d353792ad5a5b99cc11924a8f46cab488c13b2aa1ae81e4c711ecba54e992742ab50d8a9c3a931e1facb47031da73963756aafb82ab90535cc4b9ddd170722c30f81e40b377bccad197a2a744f166bd6a54791a47f15ea96717ce2d3edcc8c52bb1dab3367041ee684866920eab4a6bc0117b104c0c52c3827719d91f47aca7c66dfe09ef8e0e86ed3f073a097eaef4fda02179bbcf744094512566bc361dc2a7554353fe75e51eb6a8212e799c732f19fdff18562c778b29c32933adbcc3a07a3f7947f6fff2fe73ec1528a1d96a0894b863e4155e5e5b25e37dac600ab1e0d2d99d1143e6a46a7cbc89ac08df27ccdd726095df66d6dbf6923828bf0af8a69558b53a6ccaa3d1fb6971c5201bf70f6c587ed47e7a92d11f01796672c9f5836451afe6c6ca53726daf8e128712ad42394ecd4555dbff71b97919d71dcdc1d67e5a192fcff8af52832e451ae63b89192eb8c4c22b7e5d1f2b142e9dc9f15bb30c1916aac03b66c15f9f80e9441deb33aa4c9d724eab0387d347c9dde703dfe4313d6b727d3c271e90f246b57d93ffdd1ad12f798ecf995b3d47c100c962d30bcda2e815c0f0d8f3c52052f76a39aa6eebb44455c9c799f3555800d2d644fe209ae35fe4ad4fdcc52d49423b6245e7c495389f41083b020ddea526c54b6b1cefd21e1c655b1a0ed0e995c2489a6b9d2b6efadd1a2f17019a5e9662c0fa53ece6bc55d64661af71d744f18a40dd65b199bec9579a6d91330fbd62a8a64452b9bba398f5279a478b1b681f8e94fda9632f58e6ee60e2ab6fa7afd8920aeea13ac30063c20b6325675d1ba4add5f8c287e8f46ff50a0f27a4bf81680f4146c1bc164e565b722c77082920bd5ebdd484a5d4844733b85942203dd33c59e5d2d68205f8a7c729bcd1c9233487c80ba85aaa173aec38ee2e1d8f73d35ac01835ffc030c52911e2e14b9a7ae2efff060230104d6036bd30072faa400b934d81c4330ed610c6677ac61bb5f24bcbea0f8e10b0be4205f39bf100135f3c471261730efdbe3283327edf06c1ef4cd5df2043ea601a9ff387c824df5a93321efc7e7ea83e4470b24edb800425c8427fc4dc6d7d8306e4ab6e2c62e93aab9a7e3537fd91063bc938114e9a609fa6fbc29b5a7fae6b5e74178d1a75e892a10ed5cbeeafbf9a45f8f5f822579705ec642984aada066e183560f9a1723a015dff53cd6ce0f1791d31b9aa51d4b309a028f32d3f6d3dd1187ecd3ac9ecbf58272aaa23c177ca180a36342e0a82acc49ded515ed0f87028cb54c5fd2cf5bc5382ac4e5ed5c97a211861541bf8e6cd6012a22865b653cf08fee999fb3d513e5ab58f117db8f75df31c5676e17d7b6de0f9df9c8c91afaf76b912ae48b625d993993a1599d1135df4f1ebad8870d8181eb451730c9ff562ec088f620cc14e7861ff370de6a88316f62dbd880958c90dc32fc3851666a8291719f8c508189319f78b1043529b215b9e1dea34801b7c4fae67e4dca9977de565ab74588919799c7e6e4c1297d6c59c9e3d6c807cd83474b98c36c12e665a3ceb0940c600273959215482c6fa8f0ec6fd1a6e1ba75b40e411564f89a49ac2a28b37e6994417f307b2b712d1a9718226f984b173e4c51177dab036a93f217aeae960f1149510a5e25464667f6c3d822343292f16c160526d096f275a2457a851632588565e1b109b8cf17ab179bc880fd55745450c17b469678b72dddf424dad3277639a3f3abf9b9bc42629725f6831b56f50e9c7f597ef0cd8210211423bbd652fde149bb68e679bf20f119b428fc593b1319144ee1cd8e354df2613f8d8a35456647ab80078635dcec31116ea99b6ff27e0604fde34591c3346fa52d0bbe219e013edd0712b8faeeaaef73e2ca66b93983eb6d768103b8bcb441b42ebb125a73e30f448a1a78f17ebab334fad0e88815bcb8f91902b6f1163d447a357fc81cdd1b5dc481a348b8fbbc484b1a22bd8ee446ff7d7de8882aeae89ae2c192ffd756d9c3e8e6abda418d9960287ded10520e256f946eca7abdeb89dfb2a3643e03b789a18b8339a53bb08c2e4b71549117e94ef32b832de2a4ba5f4a7e0d6fa59184414801ee8d70c80822596af571c55b768ab8194b1e784298915750a7adf90fd0a255e16cdb1eb61a9167fd7eabc6cc5c673fa0d7283fe7a3e1a64d7ef0188b48d4b2cdea62c679e62765cef1b46dbcfbadd45e8237e696d2d6b5fa2c68a106011c6392665b7d7e25648e", 0x1000, 0xc) writev(r3, &(0x7f00000023c0), 0x1000000000000252) readahead(0xffffffffffffffff, 0x0, 0x0) eventfd2(0xfff, 0x80001) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x3, 0x3f}, &(0x7f0000000900)=0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) r5 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) mq_getsetattr(r5, &(0x7f0000000040)={0x800}, &(0x7f0000000080)) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000280)) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000300)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0xfffffffffffffede) getsockopt$netlink(r0, 0x10e, 0x8000000000009, 0x0, &(0x7f0000000000)=0x7c) [ 528.411894] erofs: read_super, device -> /dev/loop1 03:21:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0x0, 0x8, 0x2, 0x8000, 0x0, 0x3}, {0x2, 0x9, 0x8, 0x7, 0x6, 0x5}], [[]]}) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x9df3) 03:21:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x10}, 0x0) 03:21:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 528.512098] erofs: options -> acl,noacl,fault_injection=0x0000000000000400,user_xattr,acl,nouser_xattr,noacl,noacl,acl,fsuuid=551ww7wd-{v8v-?d97-3fg5-9wgew [ 528.603156] erofs: cannot find valid erofs superblock 03:21:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) ioctl$KDENABIO(r2, 0x4b36) [ 528.776939] erofs: read_super, device -> /dev/loop1 [ 528.782062] erofs: options -> acl,noacl,fault_injection=0x0000000000000400,user_xattr,acl,nouser_xattr,noacl,noacl,acl,fsuuid=551ww7wd-{v8v-?d97-3fg5-9wgew 03:21:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 528.884698] erofs: cannot find valid erofs superblock 03:21:33 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x1ff, 0x9, 0x6, 0x1, 0xc, 0x1, 0x5, 0xffffffffffff0001, 0x1c, 0x100, 0x0, 0x7}) poll(&(0x7f0000000040)=[{r0, 0x2}, {r0, 0x1}, {r0, 0x4000}, {r0, 0x10}, {r0, 0x1084}, {r0, 0x400}, {r0, 0x112}], 0x7, 0x2) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 03:21:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x60}, 0x0) 03:21:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 03:21:33 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0x5, 0xff12) 03:21:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40001, 0x45) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000240)={0x0, 0x6, 0x0, &(0x7f00000001c0)=0x10000}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f00000000c0)="1f66bde71b93815f6a0dee8525995865094ff1aa4536f7f9fc5735ef2ab050bae484406e62b21359e6073c25b52d1763a1ba0ee0e8f277b3cd40d250d1050509aa926a7868b5d04446ff3a9325c409196c21b087eadf1f321d19a15a8829b2c8fc31238135b7bfca75554c87350f2ae86f207fee8c70d938d23b1d45ac20956601b7d158f11ab6e6d6d31525ad137ffd8f4f718df588ad7a95de87f0c7487a853e5a009ea8317d0bf0673b2404d418b38c57413bfdaedca896dec4860a5a3c4c") openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) sendfile(r1, r3, 0x0, 0x6) [ 528.982874] net_ratelimit: 20 callbacks suppressed [ 528.982884] protocol 88fb is buggy, dev hsr_slave_0 [ 528.992996] protocol 88fb is buggy, dev hsr_slave_1 03:21:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 529.097440] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:21:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020b00040101000000000000e1a26cf0"], 0x10}}, 0x0) 03:21:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x300}, 0x0) [ 529.222859] protocol 88fb is buggy, dev hsr_slave_0 [ 529.228004] protocol 88fb is buggy, dev hsr_slave_1 03:21:33 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) close(r0) 03:21:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu\x00\x9aU\x87\xaa#\xa5\x1d\xd1\xaf\xb9\xcf\xcfE\x88(\x9e6\xb5\xec\x88{\xfb\xb9\'\fct&\xa9.S9\x7f\xb4\xa3.\xe6\xafS^\xb6O8\xc3\x96q\x14W?:\x1f\xa1/\x8fms\xe4\x94f\xfa\xaf\x80\xc0\xce^\x19\xbd18\x91JEH\x99\xc3\x02\xd5\xa1\x13\xd6^i\xb3X\f\xd3\xd1e\x1b`\x97\x18P\xac\xef\xbd\aD\x87\xe9\x06\xd6A\xc3^\xef\xc1\xf7\x0fe\x96\xb05\xc7\xee*\xaf\x93\xfb\xdd\xb5+ \xe5N\xd7\x87:\xeeG\x99\xe2', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}) 03:21:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xa00}, 0x0) 03:21:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 03:21:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000280)={&(0x7f0000001080)=ANY=[@ANYBLOB="f6a8e3abc775000050c4691f88bb58657144d28a4e1e59fcec9f45c1e5d519b91b5d1f3f1343b1c5a10aca6325043290e32f7b715bb423086336ebd1420eaf6cc606870400f22e6c6c538005c3d8922fceb69ee042c6da4937be113618a51315bff61e1fc5b8d184ae5a5deeb6d7b554e06bee3a7a2518028163616d27dcdb388b2bcdba77cf77ef29fb5647bc7d76392ec9a9b69dc165f75a2f00eba14ed54f7719627624f38db628d3ca64c3d320d13f1bd8", @ANYRES16=r3, @ANYBLOB="e80628bd7000fedbdf25130000000c00050008000100755f36d6a275310cd0d73ad3ac23f21ff5414028c05e377cd76470000c0009000800020053000000c7000200080001000400000004000400fa814d369ae969733fc4641ea38e934f94f40e70fd34def4727177d50b2ed6c1841a6f4f0cb8d771e70fbfb3c1b8b6312a4e43f664483f4d4ade9eee7b127729564f95b2f3841737f85d844766840d1b9ee7"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x7ded63c54b119578) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9b, 0x670000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r4}, &(0x7f0000000380)=0x8) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xaa2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="76ca5d8649f80143f45ac657cce101e3"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x24048010) getpeername$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e80)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ec0)={'nr0\x00', r7}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x1000}, &(0x7f0000000e40)=0xffffffffffffff3d) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x9, 0x8009, 0x3, 0x6, 0x8001, 0x4, 0x400, r8}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000880)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001040)={0xae, 0x100000000, 0x10001, 0x3}, 0x8) stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getgroups(0x3, &(0x7f0000001000)=[r9, r10, r11]) fcntl$getownex(r5, 0x10, &(0x7f0000000840)={0x0, 0x0}) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) getresgid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000a00)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000b40)=0xe8) getgroups(0x2, &(0x7f0000000b80)=[0x0, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0xc) getresuid(&(0x7f0000000c40), &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)) fstat(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r5, &(0x7f0000000e00)={&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000000)="fdd6af", 0x3}, {&(0x7f0000000780)="e295f8e8f549d3d68922fa499c1d6a428c9f14ff3febbe9f5410d47d6d6dd3af42def283995ae4b8daa3cb0f74dbdf2830d33ce217b359958d9bf9cd15700ed687cc550c2a76c9737ce75891d77912e46c8362a3ce77be2c3e82898a6b5e61b29827dc7e54630d922ef161ddef802752f78e424ac1dba959e764ab85c258331c94740b2de82bd513f9b301021e7e8e5092d0d1fad8a9a148bcc5929d4df399ab", 0xa0}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="00004cd87474aadab5aedd4ef58d075cc0cc0000fb8c4e350a441ce99edb5cf99435f01fb40e579e6b1b0462f96d30338f32972aa240f530a80e50ef076c683b6299f91a4754953d0236e54f2e14b9a2db213939092c0a3ebbc6f5af2d5ec24d96d368c372723e1f56b1aac091d0de1505772c09d1918e8d93eeae11"], 0x78, 0x8814}, 0x8040) 03:21:33 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000340)=[0x0]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) r7 = getgid() sendmmsg$unix(r1, &(0x7f0000000c80)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="e7a9ff271a67602d2c1c226943fd34c3ab4116abdf048866fb6b37a58e84cda2047b1b70b71246b5318b909bce85ef374f811cace8df5927a945b048bf4e5643b0139d7561c5590c38dc40af748163c7133aebb8eebc5d04e1820fc4599d95f6e085b049bcb44f27e52758d99041ff539e2a684ff72bf30490dc3968437c3f8f22bf7b229cdfb0a9c306edce4db3ca5d101a9df08e2e2bc03f87b1052f7d4f", 0x9f}], 0x1, &(0x7f0000000380)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0xa8}, {&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="bd6097dd4e630abd4f0c7da9de887217930f31a9cff1ac09e507924c9c78b2773d83328d11d3488c771bb59439a80152268b663bcc1ec6d2a13e5fb6d49d52f92d6f439bbd52d2533b77cb4d688464f2597b00728ee96560d53d527500f1c5f973354d60baeb94ddd1336e71b04e6e5e7eb4b052b311be07bd55e8924f892a11017eec44e5ecd58c79f4556dcd6ea8d255cf1b12c4d665927084e15fad8577a4761073e0c9ba9593166301d6d3d0515b02ffb950e30b502009d10fe2b628fdd66e3cc32648d8ce87db7912fb87e7d13ca005654d0c6fe58114232805375ce13eb0cc18f93838f653", 0xe8}, {&(0x7f00000005c0)="47ee91e87b521212a36d49f4ed8b7132359e41aa0c0fc2a00f08e18eb5fd34b3e68be4e0b173a33fdef53c3c72cd6eda68923acc5bddb4ef2e083e37eb269fe74f8cd56ab537e6bcff80a68c1ebe5ede2d50b3e6c232e921662e91c3d284bde95c7a8ddea75b408002a1d121297e3916b2f767ac7e59b9a92d8fb052a95d0a00feb6179da5fefc9b49ccf29123629fd673eccbbf2671c569e2de44ad8c8cac8d38136c3613f15ba59589953494dbcf3705806be30a98aedc53ef0485d913d34bf499993d6660d3155463d87fef31ac59e15c831a0e1051279e773be4e1620924ae0d1e78f50261415302824011031a0934ba030a6e1c51ae2954", 0xfa}, {&(0x7f00000006c0)="34de80391fd54c706cdb8c5781ea3d25d1a78a69f464b975ab8886d21d68af35aaffdd344a2f5294c03d01e0c6e835dd5c2fad", 0x33}], 0x3, 0x0, 0x0, 0x4040800}, {&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)="a22ff149b68699f46dc526aa96", 0xd}, {&(0x7f0000000800)="606c8915d9a8bc6981e9c68ed7f1ebbea85a9c522809ed8d3b4d89759c07f31dce65ab8f7136fce3f53a697f408e8a63781f3bba38b0f0569d76698eda28308aad1d147f093e18340f1bed1ee5b1d7003500a5164ecbec6261", 0x59}, {&(0x7f0000000880)="638234f763e85ce9700ca61d9f8ae45d3d8599216b3d54655b1666484ce65f93b19cae33cf40f8b65122a01e092fcae298c2c1a4dab03643a2364b9b7437382f7974eea6273fd80eba065888d6a263d65f3e376473ffb98caeb7153d2ebe9779c280e0bc56", 0x65}], 0x3, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x80}, {&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b80)="c62d642d296946da2545a1d880e1e2feada1fda87f36c6a96077a14adbf107c294d29e9992fbc689e852505cbdd418202e3be94047d1130ba21e5ce01064762f07c45df47db86bb65726e1d8973fe272e11fc6c1e5300a53a9333d671d4685c301b050ced33e2fc6c478", 0x6a}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000100000001004000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x30, 0x20000000}], 0x4, 0x1) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xe00}, 0x0) 03:21:33 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x26140, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) clock_adjtime(0x2, &(0x7f0000000240)={0x7, 0x7c1, 0xe, 0x6, 0x8001, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x4, 0x101, 0x0, 0x7, 0x0, 0x19, 0x7, 0x5, 0x90b1, 0x7fff, 0x5, 0x9, 0x4}) sendfile(r2, r3, 0x0, 0x8) [ 529.622918] protocol 88fb is buggy, dev hsr_slave_0 [ 529.628051] protocol 88fb is buggy, dev hsr_slave_1 03:21:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="208b1600", @ANYRES16=r4, @ANYBLOB="14022bbd7000fddbdf2502000000040005000800040000000000"], 0x20}}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = inotify_add_watch(r5, &(0x7f0000000380)='./file0\x00', 0x400) inotify_rm_watch(r2, r6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x22, "76d8d1f8172ab5931ff65a4690131ae4b73edd6bf8b8fd5cbeffc392456b93f2b5e8"}, 0x0) 03:21:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 03:21:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x41c, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) shutdown(r2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x801, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000200)="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", 0xfa) r4 = dup2(r2, r2) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f0000000000)={0x8, &(0x7f00000000c0)="f0535d2ba3831e5dc3d04ec383aee06e4b20d4198430bd746de9893d5e0842866e6e0e1a8b53778592a081030ad7c7fcfdda959635202f9105afffe2b4dae15354d00d9c0350a5c250ebc22b68f0b2d43e082212d766ccf9a6732b5fa3e537a223c9db55fadf6348110438c3551366b6379a40ba81ea30174b164962ead547b8224c852f51542e599622a1280f3c37152892dc9b72c1afbfc6ae7f0a6eb7890acea7259ce1ca6151c2114c3a1e4966e468d6cc0120e85d000dad7acc0404081d778c5a1a459d946882dbf9d09e2f4b52d9a23c8c7b99cb19ed818999f09667645014b4c2d19d43c47cbc648d1893"}) close(r2) 03:21:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf00}, 0x0) 03:21:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) epoll_create(0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x5) sendfile(r1, r2, 0x0, 0x8) 03:21:34 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000000)="6229c2d296164a433535951149b9b34bb90c800e740222cb7bf9f68babc43cea", 0x20) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r2, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x3f00}, 0x0) 03:21:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) 03:21:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 03:21:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="208b1600", @ANYRES16=r4, @ANYBLOB="14022bbd7000fddbdf2502000000040005000800040000000000"], 0x20}}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = inotify_add_watch(r5, &(0x7f0000000380)='./file0\x00', 0x400) inotify_rm_watch(r2, r6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x22, "76d8d1f8172ab5931ff65a4690131ae4b73edd6bf8b8fd5cbeffc392456b93f2b5e8"}, 0x0) [ 530.182913] protocol 88fb is buggy, dev hsr_slave_0 [ 530.188053] protocol 88fb is buggy, dev hsr_slave_1 03:21:34 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6f, 0x3, 0x5140, 0xf9}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200102, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x6479, 0x100000000, 0xea1}) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x101000) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) [ 530.262918] protocol 88fb is buggy, dev hsr_slave_0 03:21:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x6000}, 0x0) 03:21:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:34 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 03:21:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 03:21:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x34000}, 0x0) 03:21:34 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x8000, 0x4) close(r0) 03:21:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0xffffffffffff8001, 0x9, 0x3bc88c1b, 0x0, 0x2, 0x80, 0x1, 0x3f, 0x7ff, 0x0, 0xda2e, 0x1, 0x200, 0x3, 0x400, 0x7, 0x80000000, 0x1ff, 0xffffffffffffff40, 0x0, 0x0, 0x7, 0x800, 0x2c, 0x8, 0x10001, 0x80, 0x401, 0x6, 0xd1b, 0x81, 0x0, 0x3, 0x75, 0x3f, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x2000, 0xab40, 0x8d5e, 0x7, 0x80000000, 0x3, 0x20000000000000}, 0x0, 0x8, r2, 0x8) sendfile(r1, r2, 0x0, 0x8) 03:21:35 executing program 2: setpriority(0x0, 0x0, 0x7) unshare(0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setattr(r2, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x13, 0x9, 0x3, 0x80000000, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1}) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x404000, 0x1) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000800)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/96, 0x60}], 0x6, &(0x7f0000000780)=""/92, 0x5c}, 0x21) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000840)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6, 0xfffffffffffffffe, 0x8, 0x500, 0x81, 0x400000, r5}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x1) mq_timedreceive(r3, &(0x7f0000000000)=""/24, 0x22f, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000200)=0x100000000, 0x4) 03:21:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x400300}, 0x0) 03:21:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x2) 03:21:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:35 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x40000) close(r0) 03:21:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x1000000}, 0x0) 03:21:35 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="e1a28ee691c015498dd6f5dc0800", 0xe}], 0x1}, 0x0) clock_gettime(0x10000, &(0x7f0000005b80)={0x0, 0x0}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000005d40)='/selinux/checkreqprot\x00', 0x2000, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000005d80)={0x10, 0x0, 0x6}, 0x10) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/69, 0x45}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/23, 0x17}], 0x8, &(0x7f0000001500)=""/162, 0xa2}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/193, 0xc1}], 0x2, &(0x7f0000001780)=""/174, 0xae}, 0x8f}, {{&(0x7f0000001840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000018c0)=""/46, 0x2e}, {&(0x7f0000001900)=""/241, 0xf1}, {&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/198, 0xc6}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x5, &(0x7f0000002c40)=""/114, 0x72}, 0x394aaaf9}, {{&(0x7f0000002cc0)=@nfc, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/207, 0xcf}, {&(0x7f0000002e40)=""/250, 0xfa}, {&(0x7f0000002f40)=""/85, 0x55}], 0x3, &(0x7f0000003000)=""/108, 0x6c}, 0x9}, {{&(0x7f0000003080)=@l2, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003100)=""/81, 0x51}, {&(0x7f0000003180)=""/79, 0x4f}, {&(0x7f0000003200)=""/231, 0xe7}, {&(0x7f0000003300)=""/145, 0x91}], 0x4, &(0x7f0000003400)=""/134, 0x86}, 0x5}, {{&(0x7f00000034c0)=@nfc, 0x80, &(0x7f0000005940)=[{&(0x7f0000003540)=""/200, 0xc8}, {&(0x7f0000003640)=""/147, 0x93}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/237, 0xed}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/64, 0x40}, {&(0x7f0000005840)=""/44, 0x2c}, {&(0x7f0000005880)=""/171, 0xab}], 0x8, &(0x7f00000059c0)=""/32, 0x20}, 0xfff}], 0x6, 0x0, &(0x7f0000005bc0)={r1, r2+30000000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000005c00)={0x8001, 0x6, 0x20, 0x6, 0x0}, &(0x7f0000005c40)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000005c80)={r5, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x8, 0x3ff, 0xffffffffffffbeae, 0x10}, 0x98) 03:21:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00m7\t\x00\x97\xac\x9c\xf0\x04cq\xe3\x8ds\xe4\x03\vD`\xee\xbd\xad)Rj\xa9\xdb\xb7d\xea\xf8\xf9\x84\x12\xf3\xe7\x00\x00\x00\x00\x00\x00\x00\x00\xa8R\xccD\x90\xef\x10\xb5X\xf6\xfa\xff\x8c>E\xbb\xb2z4M\xdbRM\x15!\xd0x\xff\xbd\xaf\x935m\xb9\xad9\xac\x8a\xd1P\x9e\x8f!*\xff\b3\x80\x84\xd2J\xdd\x91\f\xf5F\xb0\x011\x7f\x91\xae\x8c\x02\x9d\xff\xff\xff\xff\x00\x00\x00\x00\x02~\xf9S\xd5\xd5\xb1o\xcd\x16|.\x96\xe5\xdd\x84z0!\x8d\x7fA\x93P\x0e-6\xb7Q\xa9}\xf7l9\x9c\xbc\x8cw\x96Q\x87\x96\x98\x01\x90m\xe2\xd9^\x03\xfe\x16ED\xa8*', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x3) 03:21:35 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000010000000000000000000000000000000000001315a6f51f084b802ef102594156225a52349bf6775c36ba38a32aa775f4cf741cb57c386b96419814c9b4cb77"], 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) setpriority(0x2, r1, 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) close(r0) 03:21:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x2000000}, 0x0) 03:21:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl(r2, 0x400, &(0x7f0000000040)="b32bebb27173f9519b11f9b5edd0253fa92ad6da30dcb69c509c18736e4f816f0cd0a954d30460946ce57c4b") ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) sendfile(r2, r3, 0x0, 0x8) 03:21:35 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) close(r0) 03:21:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x4) 03:21:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x3000000}, 0x0) 03:21:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="43000000000000000000000000000004"]}) 03:21:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0xff) sendfile(r1, r2, 0x0, 0x8) modify_ldt$read(0x0, &(0x7f0000000600)=""/147, 0xffffffffffffffbb) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x2, 0xfffffffffffffffe, 0x7ff, 0x80ff, 0x80000000}) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) 03:21:36 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="4e59bb99ff13b9ffaa87601520277c2ea3b2093b4dfc316ca8fee98da8c75b310b2fb131ab4c4ce7c70ef3d150209465e99292b48271af07c1233128f967d807a2ae627522fe759919e6b589f0c6ff30ed8e1a4faa525f551fa41c488ee3ab0dda63ec776a13107b7fb881f68476aba061b704455f99c5ed92400e7f6a0997509c3d20", 0x83}, {&(0x7f0000000000)="4e02b092da26f1de2fc09b46a39d03b960f27ca1d8ef5427e86704a6a2f6c0cbfa48adaa36cd44fe9b761b7bf4831e42cc5614e552f96199acfec03d9eac31fb7049cd521fa3ace3bda696010cd089be011d14c5a2dc706923da4e10b16654dc7badcb9e693f7980e20ae5923de8f31152b040b8bc3d908f511395", 0xfffffffffffffdea}, {&(0x7f0000000240)="d48f00bd6c8d44d2eb53e8a35072a675aba9cec84d5ba5a03a2685e7e64153abb3bed4b3a05cae297fbc692ff9", 0x2d}, {&(0x7f0000000280)="726e9246f4b5b5a5f54eb290e2ab22095e11711fd134b3995cb39bbcd12602", 0x1f}, {&(0x7f00000002c0)="2dffe99b062e9b4a80ea7a05bf100b7f49ffa57d892c9023125703a18afced57c4de8926b282bbcc4294f40fcd3f60f1e33819d09144ad6c7c04e788508b291a94ff6f4075fe833c9d622de63e4be238cd742dd432b090944b607b1a4c9815c9167b779fac8f0e9b21", 0x69}, {&(0x7f0000000340)="16ebfb7a79878fb810fa6f5568211b76b9d717c83c085e9606eb1bcd3810aa0c483f775b27b0b2cb5b814594f752d278a1d31bfb14bd567079c7093758586f55a45eafd454ab9f89a143db01b4a6f7", 0x4f}, {&(0x7f00000005c0)="46633a84fd6ee281ef4a287fe66c87298a6bec13a10182", 0xffffffffffffff8f}, {&(0x7f0000000400)="5333708ac39a1016473de84bc4e452d65742616236406f00e3ce083abb9932ccf9104096b20800000072d063a0dbf18637e9158cc002a86f6807864ab12655177823", 0x42}, {&(0x7f00000006c0)="0d0d3decf1fe8f0a32f3ec541e86b4d335493a3e8cec7df803a350312c2787c44fb010f8a55c4bf88aac86741fb249fd72899fb3ade524c965c5836d8bf04835e8", 0x41}], 0x9}, 0x2000000000000) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x4, 0x3, 0x5, 0x3, 0x8001, 0x0, 0x1ff, 0x1, 0x8, 0x5, 0x4, 0x4, 0x4, 0x5, 0xbd5]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={r1, 0x1, 0x80000000, 0x3, 0x6, 0x7fffffff}, &(0x7f0000000840)=0x14) r2 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x1ff, 0xa0400) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x3, 0x7f, 0x0, 0x86, 0x100000000}, &(0x7f00000004c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x9, 0x3c7}, 0x8) 03:21:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x4000000}, 0x0) 03:21:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x5) 03:21:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x8000000}, 0x0) 03:21:36 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x1000086) shutdown(r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1d, @loopback}, 0x10) write$P9_RWRITE(r1, &(0x7f0000000040)={0xfffffffffffffd67, 0x77, 0x2, 0x200}, 0x29e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:36 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r0, r1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x188, 0x0, 0x0, 0x0) 03:21:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f0000000440)={0x7, &(0x7f0000000400)=[{0x7, 0xfffffffffffffffa, 0x6fcb, 0x3c732a6c}, {0x5, 0xffffffffffff8000, 0x5, 0x200}, {0xff, 0x1ff, 0x10000, 0x80000001}, {0x80000001, 0xd7, 0xb2, 0x100000001}, {0x7, 0x9a6, 0x9, 0x1}, {0x401, 0x7, 0xfffffffffffffff8, 0x401}, {0x7, 0xff, 0x100, 0x7fffffff}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r4, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0xffffffffffffffff}, 0x30) pread64(r6, &(0x7f00000004c0)=""/251, 0xfb, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r7, 0x7, r1, &(0x7f0000000340)={r4, r4, 0x40cf}) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000180)) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000380)={@initdev}, &(0x7f00000003c0)=0x14) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000480)=0x3ff, 0x4) bind(r2, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x80) sendfile(r3, r4, 0x0, 0x8) 03:21:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x6) 03:21:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000140)={r3}) ioctl$RTC_UIE_OFF(r2, 0x7004) sendfile(r1, r2, 0x0, 0x8) 03:21:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xa000000}, 0x0) 03:21:36 executing program 1: r0 = socket$inet(0x2, 0x803, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x121080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x360) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) 03:21:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpbacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xe000000}, 0x0) 03:21:37 executing program 2: 03:21:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x7) 03:21:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:37 executing program 2: 03:21:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf000000}, 0x0) 03:21:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') sendfile(r1, r2, 0x0, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x5) 03:21:37 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfea1}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x780f, 0x6}, 0x8) r2 = socket$inet(0x2, 0x80001, 0x84) shutdown(r2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r2) 03:21:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:37 executing program 2: 03:21:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x10000000}, 0x0) 03:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xf) 03:21:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast1}}) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x200000000008) 03:21:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:37 executing program 2: 03:21:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') connect$ax25(r1, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 03:21:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x3f000000}, 0x0) 03:21:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:37 executing program 2: 03:21:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000780)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="88342e4a57e1270b1fca8e4f7c5d84ac712405eef71b7cc988f1dc44140ee2950795d039b0eab3e7e6b316467de0ea5573ecba5522e4ba4a2a5357dc8595a1782c94d7c6b7d416b328bfa01fca70fd6720e9d592a15c42fc71668371468e62e5004345ce18597e24cb5b41d151eb360c48d22e8b9bfb96ea06c423d6e2b7a289cc94e259d2c5d79b65e6a076714126b70473167f553c606fcef30f6f3bad5f4ad15eef98ea6746a0ba32ec8327823ee58fb20d329fd7bcb3", 0xb8}, {&(0x7f0000000880)="cd497ea5f1df099c0b0105d43b8009bc2a7928256715b8fd8cf132fdf44cbcd97716b6a2d4e868730a62a766a43ad9adbb96ecbe451fb7e537fb002cafc2d7694b5dfcd0c6bfe6e820ca66cdc71d5a365befbbb80321c9de63d7cf522b5b17a6a44c40faa0e3c37b868794294955e567eee205e6602df091314c8333", 0x7c}], 0x2, 0x0, 0x0, 0xc0}, 0x8004) 03:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x10) 03:21:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x60000000}, 0x0) 03:21:37 executing program 2: 03:21:37 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xfffffffffffffff4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') [ 533.665944] hfs: unable to change codepage 03:21:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 533.703137] hfs: unable to parse mount options 03:21:38 executing program 2: 03:21:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 03:21:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x6d3504e4bafdbc8, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x4}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8) 03:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x11) 03:21:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:38 executing program 2: 03:21:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 03:21:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r3, 0x0, 0x100}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f0000000240)="df355a8b9a3c9d02325dd82f1457ade82367d18adf0282ba34d213", &(0x7f0000000280)="d407bc5d4653123a55359577acea557af976f8f94517c9f8068aee9a233557f70913292d6f7438d7d99c52aa034064c88e97fd3d93613b48c5225c7fa25f") sendfile(r1, r2, 0x0, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 03:21:38 executing program 1: r0 = socket$inet(0x2, 0x80006, 0xb) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b00)={'vcan0\x00', r2}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xe400, 0x0) bind$x25(r3, &(0x7f0000000140)={0x9, @remote={[], 0x2}}, 0x12) sendto$ax25(r3, &(0x7f00000000c0)="cf88e61952dea9fdb9a9714ac5b3f746230794694642585fd596a528cc57591bf1f9ff4b07575e6fbf865e3d5a445bd6d278ea6f14ea76142b8dbbb38ec688e46d51833934", 0x45, 0x20000000, 0x0, 0x0) 03:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x60) 03:21:38 executing program 2: 03:21:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x100000000000000}, 0x0) [ 534.342888] net_ratelimit: 21 callbacks suppressed [ 534.342897] protocol 88fb is buggy, dev hsr_slave_0 [ 534.347998] protocol 88fb is buggy, dev hsr_slave_1 03:21:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x82000111}, 0xc) sendfile(r1, r2, 0x0, 0x8) [ 534.422902] protocol 88fb is buggy, dev hsr_slave_0 [ 534.428084] protocol 88fb is buggy, dev hsr_slave_1 03:21:38 executing program 2: 03:21:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x448000) connect$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000140)='*', 0x1}], 0x1000000000000096}, 0x0) r2 = getpid() r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8, 0x2, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x4, 0xdca, 0x0, 0x8, 0x6, 0x8, 0x78c, 0x1, 0xffffffffffffffe1, 0x6, 0x7, 0x9, 0x8001, 0x5, 0x0, 0x7, 0x1, 0xec2a, 0xfffffffffffffffa, 0x7, 0x5, 0x100, 0x3, 0x7, 0x6, 0x100000001, 0x0, 0xfff, 0x0, 0x0, 0x5de9, 0x6, @perf_bp={&(0x7f0000000000), 0x1}, 0x11000, 0xdb19, 0x1ff, 0x3, 0x8000, 0xa36, 0xfffffffffffffffb}, r2, 0x8, r3, 0x1) close(r0) 03:21:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:38 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000280)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000001c0)={0x990000, 0xdbb, 0x7, [], &(0x7f0000000180)={0x9f0957, 0x800, [], @p_u8=&(0x7f0000000140)=0xffffffffffffffee}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x2) r4 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8) 03:21:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x200000000000000}, 0x0) [ 534.582847] protocol 88fb is buggy, dev hsr_slave_0 [ 534.588025] protocol 88fb is buggy, dev hsr_slave_1 03:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x300) 03:21:39 executing program 2: 03:21:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:39 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x12, 0x1b, 0x8, "d7f9772bb5e69479c6a80de815002e19da4bacdad91de3463b8bbc211e84758cc09e1c9a9bef64dbe7c79dbe95b908a34f59b761751e91e461ed7c4f09b2c30b", "1b0aabdcc6926b652130e9e22f458129b96bf874728a8c863c15e49812e0ba2c", [0xffffffffffffff47, 0x5]}) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) r1 = socket$inet(0x2, 0x80a, 0x84) shutdown(r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r1) 03:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 03:21:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x4, 0x4000) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000100)) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:39 executing program 2: 03:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x500) [ 534.877510] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 03:21:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0xc00, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) sendto$rose(r2, &(0x7f00000000c0)="29f8a02a2c46b770a815c93626be029414407dfdcc55a6003ab14726bb2e8066a7af3d01adf11a840c3a9356aedf80ba17e3b7c304dde300dfe7478d9b646c2053e85f7cded0f81b323792ee8fb8971bf4e66cd8128ceb4299bae8fd99bb9a3fd9609e74f958daeb16210198b6c56ba0391813dc78bf", 0x76, 0x20000040, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000002c0)) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) 03:21:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x400000000000000}, 0x0) 03:21:39 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x1, 0x301f, 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r0) 03:21:39 executing program 2: 03:21:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400008000000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ed6fa5878c4695c6c96c076ff9abb914fbbdacaf5aa6db82bb83b7197e29ab36fd101926cc565e532cc569e3baa205eef94b7e6beab77c1207dccfd761340dc5de3ff903872305f59113e7474f1a83e67eab29d8f7b21029cf8dfde36dee7a0a7de5926e7f498058d3"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8) 03:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x600) 03:21:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 535.222893] protocol 88fb is buggy, dev hsr_slave_0 [ 535.228081] protocol 88fb is buggy, dev hsr_slave_1 03:21:39 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xfffffffffffffffc, 0x7, 0x8, 0x7, 0x9, 0x100000001, 0x5, 0x80000001, 0x1, 0xfffffffffffffffe, 0x4}, 0xb) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x800000000000000}, 0x0) 03:21:39 executing program 2: 03:21:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 535.462873] protocol 88fb is buggy, dev hsr_slave_0 [ 535.468074] protocol 88fb is buggy, dev hsr_slave_1 03:21:39 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200100, 0x0) r0 = socket$inet(0x2, 0x80000, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:39 executing program 2: 03:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x700) 03:21:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0xc42, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) r6 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bpq0\x00', r2}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) r7 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000440)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='fuseblk\x00', 0x2000, &(0x7f0000000580)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x30, 0x34, 0x33, 0x7d, 0x73], 0x2d, [0x77, 0x0, 0x3c, 0x7d], 0x2d, [0x76, 0x31, 0x35, 0x30], 0x2d, [0xd16ddf9485d517b, 0x61, 0x0, 0x7e], 0x2d, [0x37, 0x7f, 0x38, 0x66, 0x0, 0x73, 0x38, 0x77]}}}]}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x100000000, @local, 0x4}, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x10}}, 0x400, [0x100000000, 0x0, 0x5, 0x2, 0x8a4, 0x7ff, 0x2, 0x6]}, 0x5c) openat$cgroup_int(r4, &(0x7f0000000680)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r6, r7, 0x0, 0x8) 03:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) 03:21:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:40 executing program 2: 03:21:40 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) socketpair(0x0, 0x80006, 0xffffffffffff8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x20, 0x8001, 0x7, 0x3ff, 0x2, 0xbeac}, 0x9, 0x0, 0x6, 0x4, 0x3ff, "cca879d6a8713f4570bd68eb357167d362bb04f1a4d7c5244d2a8580fdabe3c7a400bdb8549c11a202902b77425dbfa5999d320cc5a76274e46458071a0c145af4b4019a5364ce2d061ec9fb46da2ef15c1fe3e1e685af80d7f70905dc7c01b356b942dbc33438417e6431ec9866503ac1763e771ea6e875b31d4dd3727ebb7c"}) shutdown(r0, 0x0) r2 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000200)='proc\x00', 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x20, &(0x7f0000000000)='&wlan1keyringmime_typevmnet0/,}\x00', 0xffffffffffffffff}, 0x30) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0x7, {{0x0, 0x8, 0x2, r3}}}, 0x28) 03:21:40 executing program 2: 03:21:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 03:21:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 03:21:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.me\xa6\x91@\x11\xb8d\xec[\x81\x99\xfe\xf2\x03r\x11\xd2<,\x06\xeb\xb7\xa77\x9c!u\v\x92Lh\xcbf\xd9\xce\x99\xbb\x15a,\xb3\xeau\nzwj\xb9\x84v$\x18i[\xdd3g\x9e\x01\x00\x00\x80\x92\xc4%\xdd?\x8f\a\x14\x96=\x98\xff_\xce\xc9\xae\xcd\x14\xde\x89\xdeO}k\x98\xf3\x9bsyg\x9c\x1e\v\x13:_\xc2\xcd\xef\xa8z\xb8I\xdd4A\xa7\xfa%\xac\xd5)\x1b\x91?s\xdc\xa7\x02\xc3\xf3\x80\xd0k\x85p\x00\xab\f\xe0\xb3\x93\xa8\x17-\x18\x17\x9d\x88\xa7BE\xb9<\xcc\x8a\f\rYW\xe7\xc4)~Gu\x94z\xebN\r\x90\x8d\xdf\x8d\xf9\x83:s\xfe\x1d\x9c\xc4\xd7\x83:\\\xab\xfbq\xe5\xdbmRl^\xd3\x13\xf7s', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x8, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000240)={0x9}, 0x8}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x88000) ioctl$TCSBRK(r3, 0x5409, 0xfffffffffffffe01) 03:21:40 executing program 2: 03:21:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:40 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:21:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 03:21:40 executing program 2: 03:21:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:21:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 03:21:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x1000000000000000}, 0x0) 03:21:40 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x2, 0x401}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x8000) close(r0) 03:21:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000400030080000000000000000000000000000000000000000000000000000000"], 0xa0}}, 0x0) 03:21:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000040)) 03:21:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x3f00000000000000}, 0x0) 03:21:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000040)) 03:21:40 executing program 1: socketpair$tipc(0x1e, 0x832bcd2feacd4de2, 0x0, &(0x7f00000000c0)) r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast1}, &(0x7f0000000040)=0xc) close(r0) 03:21:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getgroups(0x9, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) setgroups(0x4, &(0x7f0000000340)=[r3, r4, r5, r6]) 03:21:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x27}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x48) 03:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 03:21:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x6000000000000000}, 0x0) 03:21:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:41 executing program 2: ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) clone(0x40000000, 0x0, 0x0, &(0x7f0000001340), 0x0) getsockopt(0xffffffffffffffff, 0x169c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000001540)='trusted.overlay.opaque\x00', &(0x7f0000001580)='y\x00', 0x2, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) 03:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000040)) 03:21:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x93, 0x7, 0x8001, 0xadf7, "7fbbde43a1d2bc1dfd45bfcb60775538a5751b20e8020afe1960d2534aabf4a5"}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 03:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, 0x0) [ 537.068964] IPVS: ftp: loaded support on port[0] = 21 03:21:41 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/237, 0x2a, 0xed, 0x1}, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) sendfile(r0, r1, &(0x7f0000000180), 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x140, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) 03:21:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0xfffffffffffffffc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 03:21:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 03:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, 0x0) 03:21:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x162, 0x1, [0x9]}, &(0x7f0000000380)=0xa) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x40}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x10000) read$alg(r3, &(0x7f00000000c0)=""/222, 0xde) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) 03:21:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='tp\x1an#\xe7\xe8NH\x90\xc0\xff', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x1000) sendfile(r1, r2, 0x0, 0x8) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x8001) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000000)={0xfffffffffffff801, 0x1, 0x80000000, 0x407}) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x80000001, @remote, 0xe1}, {0xa, 0x4e21, 0xbf, @loopback, 0x100000000}, 0x9, [0xf6, 0x100000000, 0x5, 0x1ff, 0x1, 0x90, 0x9]}, 0x5c) 03:21:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x3}) 03:21:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 03:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 03:21:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) sendfile(r1, r0, 0x0, 0x8) 03:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, 0x0) 03:21:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0xd9, "81f5b94310d17bdb2f208e07cf41f4ab09a9a535f2ad05844f789582fbf57e0c7453edbe46bfe03cbee596957b51ed70a7f74f0fbd4fe97104adf109c0af8ff2897325e585fbcfb58fb63e85f59019377832397a8ad48b75bdc4335ac416678b8f0245565abece817a827669e8fe15cf62a949aff819d87d8ececdc81474b7e907a04ce3b63fe3479566e6815ab746300eca8c05512f6e4ec3240dea458133622674e1612b3af6455419b3412d077e88336c6cdea0591c645431c45b77358c353b15d36a8535938285e85f0fd1fb038edc258c81f725bcdcae"}, &(0x7f0000000180)=0xe1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 03:21:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000240)={0x7f, 0x2, 0x87c7, 'queue0\x00', 0x7}) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000480)=""/16) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x10001, 0x0, 0x8000}, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x11, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000400)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000000000001900ecdd01000000040000000800000002000000ff03000000080000000000000000000000000000000000000100000005000000090000000900000005000000040000000000000000000000000000000b00000058fccb450000000059f919ef370d2f26df000000000101000001040000ff7f0000000000000000000000000000070000007f00000004000000b0000000050000008700000001040000000000000000000500800000856998f2f8be5e32fcaa478f7d57f37bb316b5"]) kcmp(r5, r6, 0x0, r4, r3) r7 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') prctl$PR_SET_FPEXC(0xc, 0x80) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x121, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendfile(r0, r7, 0x0, 0x0) 03:21:42 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 03:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x6000) 03:21:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x3}) 03:21:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x81, &(0x7f00000000c0)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 03:21:42 executing program 3: signalfd(0xffffffffffffff9c, &(0x7f00000002c0)={0xffffffff}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) 03:21:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x3b9, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}]}, 0x0) close(r0) 03:21:42 executing program 2: readv(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) exit(0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) creat(&(0x7f0000000180)='./file0\x00', 0x5) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x48) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) 03:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 03:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 03:21:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) 03:21:42 executing program 3: signalfd(0xffffffffffffff9c, &(0x7f00000002c0)={0xffffffff}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xa}, 0x0) 03:21:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) 03:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 03:21:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 03:21:42 executing program 3: signalfd(0xffffffffffffff9c, &(0x7f00000002c0)={0xffffffff}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:42 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20802, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x2, 0x1b0, 0x0, 0x1, 0x1], 0x5, 0x20, 0x5, 0xff, 0x0, 0xc, {0x3, 0x8001, 0xd21, 0x2, 0x100000000, 0x3, 0x421fd9, 0x8, 0x4, 0x9, 0x4, 0x8, 0x9, 0x2, "3d7190e04d4e40ec164f9d3dfe19b369c51c9216de194eb771dbffde42eb3943"}}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:43 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f6ff000000000000000000030003000000df870000000038000000000000000800000000002000010000000000997c000000000300000000000000030000000000f10000080000000000000000000000000000"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 03:21:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 03:21:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 03:21:43 executing program 1: r0 = socket$inet(0x2, 0x0, 0xab) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffbfe) getsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000740), 0x0) 03:21:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0x3f}}, 0x5, 0xfffffffffffffffa, 0x5, 0x200, 0x20}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x7c9, 0x5}, &(0x7f00000001c0)=0xc) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000240)={0x4, 0x1, 0x80000001, 0x7fff, "d14ff38fe7c1b8b209afbbe86d111b297a976a17b710b06c4330c03614b883fd"}) sendfile(r1, r2, 0x0, 0x8) 03:21:43 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) [ 539.382904] net_ratelimit: 20 callbacks suppressed [ 539.382914] protocol 88fb is buggy, dev hsr_slave_0 [ 539.387950] protocol 88fb is buggy, dev hsr_slave_1 03:21:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x10}, 0x0) 03:21:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x31, 0x29, 0x3, 0x8, 0x1, 0x4, 0x1, 0xb4, 0x1}}) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x1c, 0x1, @tid=r2}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:43 executing program 3: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00', 0x0, 0x0, 0x7c}, 0x2c) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 03:21:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 03:21:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xfffffffffffff2f8, 0x6, 0x6, 0x80000000, 0x3, 0x6, 0x1ff, 0x205, 0x38, 0x1e2, 0x7, 0x81, 0x20, 0x2, 0x6, 0x6, 0x6}, [{0x7, 0x0, 0x1892b7d3, 0x4, 0x4, 0x8, 0x7fff, 0x1}], "14f6f33038a82f8126d2cabaaf54e96838c137f9425473f2a8690cb2724b5f83d5e2efacafd4dbfae31c3791d5cad3603d5a7f42d03c572dc7b55a111a56398cd01c1ebe7cc9bc21f04179ed9aa4353f65ca9e732310e662994e98875b0e7eaac25fc95c02d0b359f586ac54e656b583b80cad23b4e1c1a93f66d626ced9d4d834ce2f59093bc51508317220a5698f4849d45fc285602dd4eedd1f26ef", [[], [], [], [], [], [], [], [], []]}, 0x9f5) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x60}, 0x0) [ 539.622897] protocol 88fb is buggy, dev hsr_slave_0 [ 539.628102] protocol 88fb is buggy, dev hsr_slave_1 03:21:43 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) 03:21:44 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x9}) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:44 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000440)="24000000010207031dfffd946fa2830020200a0009000600041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:21:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000001, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x80, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x480040, 0x20) sendfile(r1, r3, 0x0, 0x8) 03:21:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 03:21:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 03:21:44 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1f, 0x301441) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x86) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x200, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 03:21:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) sendfile(r1, r2, 0x0, 0x8) 03:21:44 executing program 3: socketpair$unix(0x1, 0x40000000003, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) [ 540.032897] protocol 88fb is buggy, dev hsr_slave_0 [ 540.038026] protocol 88fb is buggy, dev hsr_slave_1 03:21:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xa00}, 0x0) 03:21:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./c\t\x00m\x00\x03\x0f\xc9.:\xa0\x00!T{\x89', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000180)=""/12, &(0x7f00000001c0)=0xc) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x210, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000040)='hsr0\x00', 0xfff, 0x7fff, 0x4}) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) accept4(r1, &(0x7f0000000280)=@can={0x1d, 0x0}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@rand_addr="bd30d5181bbf894e5fa5691b3b35cc00", 0x11, r5}) sendfile(r2, r4, 0x0, 0x8) 03:21:44 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) r1 = socket(0x9, 0xf, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) 03:21:44 executing program 2: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080)={0x0, @multicast2, 0x0, 0x0, 'sed\x00', 0x0, 0x0, 0x7c}, 0x2c) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 03:21:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 03:21:44 executing program 3: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000340)=""/87, 0x57}], 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x5) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x48) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:44 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000103fff, &(0x7f0000000040)=0x3f, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 03:21:44 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x410000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, r3, 0xf7}) [ 540.582901] protocol 88fb is buggy, dev hsr_slave_0 [ 540.588025] protocol 88fb is buggy, dev hsr_slave_1 03:21:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0xcc) [ 540.662916] protocol 88fb is buggy, dev hsr_slave_0 [ 540.668156] protocol 88fb is buggy, dev hsr_slave_1 03:21:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 03:21:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffbfe) 03:21:45 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0xfffffffffffffe66, &(0x7f0000007f80), 0x1}, 0x10) close(r0) 03:21:45 executing program 3: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000340)=""/87, 0x57}], 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x5) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x48) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/231) sendfile(r1, r2, 0x0, 0x8) readv(r1, &(0x7f0000000380)=[{}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/6, 0x6}], 0x4) 03:21:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 03:21:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x3f00}, 0x0) 03:21:45 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0xd000000000000, 0x3, 0x7}}) 03:21:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) 03:21:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 03:21:45 executing program 3: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000340)=""/87, 0x57}], 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x5) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x48) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 03:21:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) 03:21:46 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:46 executing program 1: socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 03:21:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) 03:21:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 03:21:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) 03:21:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 03:21:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 03:21:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@can, &(0x7f0000000000)=0x80, 0x800) write$binfmt_aout(r2, &(0x7f0000000240)={{0x108, 0x2, 0x3, 0x33, 0x337, 0x9, 0x33b, 0x1}, "b355d8a8ac4fa6f0cc72ac7b19e46376609e51864b1941ab70e2ae1bababb7dc9c1723822822c1813f60619e4e282d53a02bdd41de3c55612085944a51b042baffa0f2a12c7c3007658d4a51b85a0290829dd97bab2a21cb8780b92e684aa979cf01f3793b941046a11d50c812e1dfcd8d19cab4fcec79c304789d6d6368bcfeb99ff748bd4edf264cc63cb27fdae0cc4a5afd163f15ab566855b38cd1d096296aee733cb071cfa025a64c5757f85d8b9f0b64e648a5702fdd149e0c54ec87a523b79a60ddf69866693d546d28e0041499a2b443fd30097634473d42f909665ee40573b447c21f403f8b5749396f2ad0fc4cc0371fb1c4ab", [[], [], [], [], [], []]}, 0x718) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0x4, 0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) 03:21:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 03:21:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 03:21:47 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cp\xa0X\x00\x7f\x96c.g\xf6p\x05X\xf2\xe4H{\x97$\xc2\xe4%Cd8\xbc\xd0\x19\x15\xbelv\x06\x05\xad\xfb\xeb\xa7d\xbbs\x92sIK\xdcI\xc4\xab\x16\x89\x12Y\xeb\xaa\x0f\xa23B\xe68h\xe8Sfo\xb3\x17\x82D\xf7\xa75\xa4%\r\x99\xad7\xf7\x81\x17\xde\x13~\xcdT\xb9\x1a\x17\xc1\x18\xaea\x82\xa3\xc2d\\*\x05!\xe2\x06\xc5\xab\x1f\xfe\xf4\xb7V\xdc\xa4(\'r\x8aCt1I\xa7l/\x99\xd8\x99\xfe\xcdD\xb5]\xc1\n\v\xf0>\x85\xf0l\x98\x7fH\xdaZ\x81/\xcd\xc0\x94\xd1J)\a\xd2\xa0\xb4:}\xc9\x8e9\x91\x1d\xc7\x9e\xde=', 0x0, 0x0) accept4$tipc(r2, 0x0, &(0x7f0000000000), 0x0) sendfile(r1, r2, 0x0, 0x8) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x5, 0xfff, 0x8, "ad15165b2dc292535cba6e65aa6e863a4d20bee95fef7ba51dc6690b1d6fa5ef3332a368ffe41da2721f3da7798d7a26bbacc66e27c358ef85bee9e303c43c", 0x3b}, 0x60) 03:21:47 executing program 1: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x9) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x0, 0x0) 03:21:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 03:21:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 03:21:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x40) 03:21:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 03:21:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 03:21:47 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 03:21:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) fallocate(r0, 0x0, 0xaaf, 0x1000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x3}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, 0x8) sendfile(r1, r2, 0x0, 0x8) 03:21:47 executing program 3: r0 = socket$inet6(0xa, 0x2000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=ANY=[]}) 03:21:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 03:21:48 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000600)=0x1f, 0x4) sendfile(r1, r2, 0x0, 0x8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000001c0)=[0xee00, 0xee00, 0xee01, 0xee00]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x6, r3}], {0x4, 0x6}, [{0x8, 0x7, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r6}, {0x8, 0x6, r7}, {0x8, 0x1, r8}, {0x8, 0x2, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x3) 03:21:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x8000000}, 0x0) 03:21:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 03:21:48 executing program 3: msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1, 0x1, 0xa4a3ad41a8795de0) 03:21:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xa000000}, 0x0) 03:21:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x40000, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:21:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x5, 0x5, 0xfffffffffffff800, 0x8000, {0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x7}}, 0x32b8, 0x9e5, 0x3f, 0xfffffffffffffffa, 0x40}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x8, 0x10, 0x8001, 0x81}, &(0x7f00000001c0)=0x18) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000000c0)=""/139) sendfile(r1, r3, 0x0, 0x8) 03:21:48 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 03:21:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 03:21:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x1, 0x4, 0x6, 0x1000, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/4096, 0xc4, &(0x7f00000021c0)=""/196}) write$selinux_validatetrans(r2, &(0x7f0000000080)={'system_u:object_r:hwclock_exec_t:s0', 0x20, 'system_u:object_r:semanage_exec_t:s0', 0x20, 0x6, 0x20, '/usr/sbin/ntpd\x00'}, 0x6d) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1, 0x9}, 0x8) 03:21:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 03:21:49 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:49 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x7e, 0x0, 0x0) 03:21:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/hwrng\x00', 0x40400, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001cc0)={0x18, 0x1, 0x0, {0xffffffff80000001}}, 0x18) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000001c00)=[{{&(0x7f0000000440)=@can={0x1d, r3}, 0x80, &(0x7f0000001740)=[{&(0x7f00000004c0)="34b9272238346570d49c728289d29ce28ae409d98b316e4cae526f5227d9e86d3a860d4a1b6afa881c132780641db4eb0e2f85468c793e50c08a8f60cc9a50d1b949cf7f8579d39845104912f05de5996ae401fcfc81c4c8cce72646415a16000320c75c048d09d809f5a1de2a6af9bf101c37599b520ff529f05b11e5442c49e0e473053de4dfee", 0x88}, {&(0x7f0000000580)="a5a957a27e12bb90d44d626101bbfa4edc63f297218f2e0fe6680113fcec5456016e3eaa519d8bac66d94ce201d3bd4ed69fd5d5752a07a5e6a2a98eeab126afb72781b8c76a6fcb94f930a58d9a6a3cd0a1414a3e1b10e076bb8525c5506823f069591c259619fb4b44e3fc6dc7a924c4890466fc8be8f3a92a16b45b4cd44cac2335", 0x83}, {&(0x7f0000000640)="6643d29940f1d5d30b32304cf576afdb6318a37175ec815b43bcb558053851b0f994daafb4cb7c040b476db3029e5e06111b68cfe9c33eb47fda9900044a9663c0a80806e77293bc63d8e521165cb6c796e668d3deb9735a234e106c5b09c1e550a2b5f1b42d08f8fc35ca632030e9273c742bf078d90763cc870a5799602e2fb0f76d089339cc037e9fa440a74ef1dbc31405b6e28c1af608183758903dd908b6048621e127560b610ea6f5f9a4805721976eaa4ad29f7f924ba7d2e6916d72138ac03f3cbbc141bb923add401833dbe86ffd5b9264637f5c0db4b256701fd4121ba55304c20bd9c9d26d1463304a8b043a0ee98b31c03623a2e0", 0xfb}, {&(0x7f0000000740)="47269923c51d25af8d4e688f5c4bad4f4e00d8ec53c449890fe5de8a0b039fc324a9eb7f06625cfaea7c38d6f27a03a4baa3e11cdec2b0944f5e1c75024e731f21388f92d35307f928e04133135d808d7e508be3e03d6c5746302fe562b8bdf9e79ad06f729a422b68c5c97675ea54c84347f29bbe1feb3d4a1b207c9ae7170b3e19ac8300a52fc99991f22d53a5a76b1a77fe2f7de7dc2c7edd4c9090012641b8d6ddbf11867aaa58011d4f5a916f9140f9d01308132ab9304cac403810efb8b49c8f7a33c1ba3ffc8fdaa331ebfe2f7252e518c8a41f2beb12c5603b9280be2bef6bbdbc60bc931f5ece3970a74a78004ee4f983a66700af5f30ca40abbfb5cdd5376b135bcb8d047d84f941b6802c2b4ecc7fc66fab1061b4fe20b6de0374b9becb6de6846ad7237a21af2c4c4ddede348a623a8c88214b53a0293f4b96293ad49e2c61c2bf1d5cf882e1fe06b570aa092b38bdea076345fc2ced5749162989e4935e7d202e412b52636032582f6cd44ab373e0e786c486ab827fcf7b22a5793cdccd4a73eb684255638d309c86761250351553ea696d7d186c8b2d58ef3ecfda200736645970e8e2b532b2a65edc084ebd4593f040ee057c4f2dbbb59b3076919c8605bd4132b22d8177a35940d8dff110bb6bab9bc2a2c817e5fbca4c2c5e234953215bdeeb2f69b269a1e3e0729aee0471739fecd68a2876059200e42381b7526a1a64cebd0c116ed6c03a503f0cef6da6155e2e6b0d96c92bcb2847ee9e3ed98dbf032a6c511c4638fdf7f73750a22dc8c878e8ce578087d66183bd6db3f1502fb53f4f93fb15250d3da37ce1b53f0ead15ecf37f547f9b638cb506fc96432cf155e29995b1ad8c88390499652962d0e722c6aa3d260adc6e63d21b5316bfc9bad63de27140bf8274f9d31fdd495b59bb8ffa073bc65eca65dca3bba7aea1e308695ae3924dbf4c7fe9aee66d8e5abe0045a3bca0a018c817eb6f9f4577d9be2fe0d61ba8b3cff2c517107dde78682c5aa5f1fa8b4ed2a91b5fbb657ff28c7411619a75345495f56b8aa33666a45d52c73afd875dc87cfa436ac724994877ae15f7ed4a44d8a777d0970191251d52ca5b7e441efe09b951a6e7b0f205dc9c69a168d09e2afbe73afa17ca57ba408457a131de2f157f167d82cb7db62226bc5fea29850c072c25baf77dacfcbebb97ead3d61c40fef32be066b9fc5849b7ecaa2208e17af8fdd878dd190de1314b63c3f36101f2fb49afcd43673d785224f5cfb76b8d9dceb848b909bbb1b0f988a12104475e5e2ec5e1e9c2c090fc5ab1e787ba7d4e1863334940c96c911366b0dad9a0f270bd298e7aada3c900d76f5222b83b2173e4e8f20378fa6f1adc73902b4d9f17679aa254364ec1403ab6f71b553676cd91593de0b25fdab8e63177d027a2c7fcca08f24dc02023c379e10541c465892b946e703f7eaeace9c8a42de705bd410538db4fc027d53286323107b6bad8d018bf77d02c8b30f4002889d2f6ed57d54d039241f313cd35c564f7b6dd8ad778fc10ca5e7f327f1e65acef50112b2dd289155c972fa32b4cf862d07d750d020438a4da4c106102a1a00a3c65392593c080364d878fc704440561fc807025f083f68b6e44188fe8cb3a5e74c8f451bd972f535bf44f3f1e1b8c791e63ead8d1d64496f15943eaef26653c72b19abf949da771ce6ce3cfadcc7e738eaaaaddcb2f828c056fd71b03e6a7626601d22309db01cbb10bf2cf72dccd8b6ef3325ae523dcf9d9db62d6ab48946017ff527410c571d5cc1f9cab183b7d748de018b3300b22e05c56b199400ad2aae76f5fffc5aa2ce8340e890796991c890e1c06a6359e1820e08f1fb3eded420311aa70e2157ec1134bc6a2d5a790b065a87b5f6bffb86fc237e6d6e97e57d8fbcb9c1430521176846d92da7a75eae68a4537c8c04025c0d45a343fa774c24e8987eed04068804957a3e4056108e951920f1801a2c6fb911e61496fc9c21b0f5d1b3c04c7c6226125a1ed5a9512b448f0809b84543ce71d3c5b871a09379cc78837d9fbd5aca7f38495e5852350a823be86299e45e29d7f216acc455cacc6da5fa5da0e6ed12c3174884f1ea55e6a2420b58af6a1da75689f9a6954abd82d8e7e84f694545f2c813b279ebc4b986cd991bbc9e6d92f8e1489390069dc7484cd91da3ebaf253237cdf09ebd05e3c090aaa1a3991173ae61e11d02712010206b4f9fd9f4753454c05b2c235c66e742e27f9fb2cffa659e2101b512c7802af5f76e1dc78a30232fb8378b485a6f60c42d0b9010c6179ba7ea6e5f5ac1189275fb38bb72d3d8602455d9c231a5c15d9faf580913da8a9118140c128cf6f36560812da650505597713fe235f545c3cff887f0714f9c7db40c3322c842120dab47760374192c6b226c5fc79d48b2b45562ffe9806ade7fddae54cced0a54687c4f1b35f24bf4f310662d3cca8f99449a0b228d6df15fffef1c7b89fb9a0de077099c898e9aadbb4390ac8c394e9a973c765a6ace26fcf652ba3c373956b89ac71fea84b4356897b77d6ffe3f61ccf16a8f2f85c3c851c8621d6af824ee107d345e46b70abec5d9af33cb2cf1dc2f785decf9122ec30fa2c772245df8e250c71b7098f3ff84da10f6ccab8dd3bedd7903e2dd304c2f42bd40d55dbdfce661ee601dfecb828600c2724e766dbf37eb3a72344e8c2a7bed472251a663e2b43cd4a021cfe062a0120bd28d2958c88cba516c7066dba56c4700412e7d5360a353dda93d7834aa328291aedb7489fbe5e9c95c49a01a66f0a5207d7e69956ae13339f07a4b98686d6ee507e233cefb2d6074f711583c2772562152d9781341617c35664b0104413e4ddc62053ed5a8d1335f0bbb88949346efe179b5647244baef2e00f8fedde86dd447c0d1f2858581a8eda5595bc2f74e29b6b19f6f769b03b787cdd83529d364af3edb3534a37d16d86653d690420faa28d370f5bdb4c39726ecfb36c4e161980845959f85d6d7d4a70a5dd909b4a08df27d19d8153f1dda4c94c150bbfae437ce67ff78a35e5cb9fc45af00b8906f2ba78470e42f936020680b6add73de561ee121abe2acc2973f2b142782915f9332aa879a038ede6b800cd55763ee84932f9c6a3ff95608abbb12c4a1c6491855705a2e398949c3d4cd0e8c4f57725b9d3ad91544c3582bd710b280c9afc254ac42f80ffd1bfe565bf210d5e5783f0e9c87c7fda292cbae1897253c2dee4b7243ddbbf1d8a537f727cadeee9681cf0cbdbfb2024dd98d01bb076f3490f0e27f48b6ddb1e6159edf9fe9fa253cb08f4e1efc313a1cdecc39f634484192f055932b33649e5b56cf204d8b075f6fe0602edcad656c642d81f7035e2e5353559193085e9e5affd1c6cf3d807f6e2a386dbdea0915a9fa79d65490eadba723e0d68fb345f030855a70d83c6d2720a3f5b7c34f24f546b83c01217f9fa8b5e853efa29165b1b893c040a5a4e7f64694b07690e47d43a1544581528d38f910c834942aa3e5eced4f8db752ef0da982d29091cbae5632cc7caff6f90bc00770b08de39cd77a71fb66eb373ae013e552b2998024f4ce4eca8d1674b6d306538d465c53e46ae398191c2ff63c517c64de799622e5b4d67f5add4d3f23ed11843b3846ac260d52e02f80b77ee7e2fe316fbedc995adca79bd5a429e48a0cf05ef13684fca6b0651d941384f21d9b7269be9c93f4a6c1690fd6938a3c680170ea130af884f365bc8eef21d89fd6a1e28c2f5c42238a00eca65f2ce2575c40d66e24b7760b650c03cfc73959f071585862998f591ab9e46274db65ba0dfdff14c38b073437c77d67f8764c75f0d4b8968ca3ecbd45414aa9ab575819a7188a5be2542f9e75171ed6fa6d897984af3cd9ddba61842f8862724ddc55f2dc140cdb5358839b20f0e745eaa3a09c43672963cb624e346c49bbc89c1dee03bdce7a0b380cd553f92367af55e8de1bf4e046dfebbae124d0e703f75dc812622891e7643116a4b2be78660f04a8d4271113f0eb9dd392aaa23950d66834f2d8e35608958f0b0f7131359dc4b788f1a270408c1dd634697583892e8862b036df330ab4b0ae879cd81638747d6ae88bdb715422e06f70a4c9f542b317cedcc8aeda5aee01271d204ec16c30deae8c74cbc1e7364b0baad546b41a514d4ddca60593f6a5909a0599e4ec35fd58f0d02224ea4b78f664337b67631474e2d46c93de6cf422d6e9eff98e504dafd904ab292ed8d4a8f9ca0c8c8d4c5f203480e4d75fce258a0870f1ab4803e2ce62a2d326d6cb1871340c074e3b6e7015ec9c92efb1cdb2f6c229b3b63de6fdaf7d712fee3eb962b67051cccd4be4dda0ab40ba2e6f7e82194ff0a3ef755f84ccf0d49d55c9c517af90e713b7368e5cde98db7158db101cd3f85c5e61764779b3d2d1cf202a13c369edf831a49fa62603ec9f44af76595356efab1c80bd59fe6cb6917ed02d0b8477299f182dcfcdcb1ef3c84835bb0f5e65b71b97c740e00295a3374f843796cd492f70d5f9b9999e13dcb452b66955cee7953c322fc1ed748f6ee16161a8232f690f4f26a98e8badaefd2f945a5e9cebcc53197f3bf05ac8d0f3c1f63533b50ee6bf0636222d18513a4638318d807b29bb171e817297f24862f00bca4ec7c1167dfca2004ac5f1f855433e189d24d4ba3d44bf033b7602ebd81e52d908d0867649736616610b8f21974ac4d949855733cea8c4715b426303a4ab08ca23a30eab5be6fa52381f0dc1f71acd3a9031ddd1f302e96abed8277592b94c8c1dac324980af5aaa82cdb003324ff0cfd2edf88dde91facd95adb30dd569c56d509456a033329a8c4161a46de5ba8ea3e108cef2f8b83033dadc4823da13acac6f46cef04a039aae42698a40d90dd82a28678d9f62d83a70572aff2762db65b5f526a9d1ecbdc9a5a7b35b1bfce22f1830a4a2d7e00786ec0ebfc7002b09e5ab6fdba2cfcc2bd3ce4931331de09fd08a950f8e93100dcc2684e399492fe8d2bcfd5f77b174b6b1f3c836b24395b0ccb1dfd2ce76b707f23be5370bff414613504d77605db0a1882a6a9e8a77cebc7af6b765d4b94d23535fa4b1493f0aabe5fdf82269f02d98b540fe97a19338358fe029e1c888b3dce8a5aa3c01cc24a9fdf4116b5a5f05ff0a27a62d484d522f5c2c4ddb5f390bba5310e879cb5f80b37fdefe8c40aefe205ec8197a7b63b91613f3dcdf167fe023e67a0190e6715eca57d47da6107e83dfcbe76a592916ccb594f5877f63a2e8a651fc2499e33e13aadcf8543c3ae78d5b19df1ffd510303f210052c5e89f0b187da5a6301a1b7c29e610f454c292a017f2fb4abcc8ad5f3f3421b666f3a1886e7b3ab0f3933d8b127ef54c23bccd7c280d3b5e01e81ad25e43b8916431e5f46a0f8e1c5b5ab31a277123e59f3022775f63e9bca60e4aaec60da7dbeda632cb0da10b42ac5676b7b90a2b02a6c74bb685369857cbd12837532dd738e734c25074c2a37e8e0e0048343ffdeb7faf8467565dd237bac24570f52b28b18e6158793c502459da909205bb508550cc45198bc71d0c41c779b62aa558cc96445b01f57b291aa0a8c7e200ec1d037a6db8a7266ea861e990f52ed9c1c04e8165b7803816d4a8acf91decbd00941a2a1b9b8f4424340e4b9d49d258e046aafd65cca19897818af8cd30b266cd96f70a972febd334c041bcc076f977251424208143f21d231b30a80f3e064e9909fa162256f841c1195f614998a0cd6895217cc4fcb3fbffd012ae0df45f4888b9", 0x1000}], 0x4, &(0x7f0000001780)=[{0x38, 0x11f, 0x7d99, "f0ce23d5b81610fa4d21c4a59519a2f58949869e56dd347fb4c2b47cfa90f84b92479e"}, {0x20, 0x6, 0x7e68, "bb93fe26e9b3485c55ff5cfb1766"}], 0x58}, 0x6423}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)="39041ac2fb6559eb20a197f644e4f4f90205a9adb87878a00165360aa8e028b84e0a817df20eb2c258f8df0e2c4ae9554395e75341dd90de3693c26fbb839d8403219f836c43c70dd3c4fcfe2ded129c615bcb288be61ca35cff81882c2f1ae291d63ba0aad1a8e962720d5d8482a6e0dba8ff7d79db7b381a6540737488ac9dc112831d259e69890b67f39c0d682f77ab9a246d8944694d0d49f0c26dc716eb19e09d65754f2f6fd72a9836a11070c3fa7a31936847feaa0ed838c80c2159cea5a0d0ab32c2697e1060de1556b71e49", 0xd0}, {&(0x7f0000001980)="9dce6fce79e5fc2c39de7a58d036c134f2287d6779061da55b5e4b059d01a425b839c688f86c62c3f9ce5f235954e3297f92bd8dc03d1f837f33d29c234ec8131b0a2fa456d79f511b5d9a41c730bcc8ee1dada3a0528fc78f84e4304d12299a1483ad5e3812253ef899f367f5960a0f9d7de6365c747aefc46537adb824abe9", 0x80}, {&(0x7f0000001a00)="61ca87417da3249b957486f251f9014ca66b24c1b702c04204c28f8af3275eab66c3137d0d9ca1a8b7b42b79f2d1d65a2225367f31e10b0c0a37958f423584f2356193a296df70422970336c101ee4ae598d6e8e8de2e091", 0x58}, {&(0x7f0000001a80)="281fa4b40e592985fa809077622acf244412d261d1dc1f26d3d4ecc30bf16b7cb3942ff4bb7b0c890c632ec727bc885301669b200b88c3a615c9db5dce487ca6eed844ec759f2b1e9c364850e7948b3c57815a38ed893d7467f2bc4561a6c241e5438da5583b896c6c82cf8eef669b49387b5b78602e0152ee056c1045145cedd8367e48efd9d39f7a2304f216a3281c54aba791", 0x94}, {&(0x7f0000001b40)="34c03d18e55af07f4ded6578fd65eb6faa315d4e9ee507e7bd3f", 0x1a}], 0x5}, 0xfffffffffffffffb}], 0x2, 0x8000) r5 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8) r7 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r8, r9) 03:21:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 03:21:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x60000000) [ 544.742890] net_ratelimit: 20 callbacks suppressed [ 544.742899] protocol 88fb is buggy, dev hsr_slave_0 [ 544.753034] protocol 88fb is buggy, dev hsr_slave_1 03:21:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) [ 544.822892] protocol 88fb is buggy, dev hsr_slave_0 [ 544.828047] protocol 88fb is buggy, dev hsr_slave_1 03:21:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x10000000}, 0x0) [ 544.982888] protocol 88fb is buggy, dev hsr_slave_0 [ 544.988084] protocol 88fb is buggy, dev hsr_slave_1 03:21:49 executing program 1: socketpair$unix(0x1, 0x20000000003, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) fcntl$lock(r0, 0x26, &(0x7f00000000c0)) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x9, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 03:21:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 03:21:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0xffffffffffffffff, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 545.622878] protocol 88fb is buggy, dev hsr_slave_0 [ 545.628002] protocol 88fb is buggy, dev hsr_slave_1 03:21:50 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) 03:21:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x3f000000}, 0x0) 03:21:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0xb, {0x0, 0x9, 0xffffffff80000001, 0x10001}, {0x6, 0x401, 0x8, 0x9}, {0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @ib={0x1b, 0xfffffffffffffe00, 0x3, {"138c331b21be3a955bc9e0c554411ebc"}, 0xffffffff, 0x6, 0x8001}}}, 0x118) 03:21:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:50 executing program 1: socketpair$unix(0x1, 0x20000000003, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) fcntl$lock(r0, 0x26, &(0x7f00000000c0)) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x9, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 03:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 03:21:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000000)=[0xfff], 0x1, 0xff, 0xbbc, 0xd6, 0x100000001, 0xfff, {0x9, 0x5, 0x6, 0x9, 0x7fff, 0x8, 0xe7, 0xd21d, 0x4, 0xdb5d, 0x0, 0x0, 0x6, 0x0, "480043358b175c66f555530a8029c75a85b22fe5bc39f666b7d49bdb877c278d"}}) sendfile(r1, r2, 0x0, 0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0xfff, 0x8ba8, 0x5, 0x2, 0x0, 0x7}) [ 545.862877] protocol 88fb is buggy, dev hsr_slave_0 [ 545.868004] protocol 88fb is buggy, dev hsr_slave_1 03:21:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 03:21:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_adj\x00') read(r1, 0x0, 0x0) 03:21:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x7effa9452700) 03:21:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) fgetxattr(r0, &(0x7f0000000140)=@random={'user.', './cgroup.cpu\x00'}, &(0x7f0000000240)=""/186, 0xba) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x200100) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000000c0)={0xfff}) r4 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8) 03:21:50 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) 03:21:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:21:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000000000141042, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) connect$packet(r1, &(0x7f0000000880)={0x11, 0x6, r4, 0x1, 0x4, 0x6, @dev={[], 0x2b}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(0xffffffffffffffff, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) 03:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x2745a9ff7e0000) 03:21:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x180) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0x2) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) [ 546.752696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:21:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 03:21:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuac\x03\x00\x00\x00sage\x0epercpu_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 03:21:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000180), 0x8) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 03:21:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:21:51 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) 03:21:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20, 0x2000) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x8) dup3(r2, r1, 0x80000) 03:21:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:21:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 03:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:21:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2f3) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 03:21:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 03:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:21:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2100000400000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x7f, 0xa, 0x5}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:21:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x7, @sdr={0x737f5f5b, 0x200}}) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 03:21:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x800000000000000}, 0x0) 03:21:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x110112, r2, 0x0) 03:21:52 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x235b965) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', 0x0, 0x0, 0x0) [ 548.661289] audit: type=1400 audit(1550978512.933:942): avc: denied { map } for pid=29746 comm="syz-executor.5" path="/syzcgroup/cpu/syz5/cpuacct.usage_sys" dev="cgroup" ino=194 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 03:21:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.opaque\x00', &(0x7f0000000700)='y\x00', 0x2, 0x3) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x13c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="40bb60604c9d9f3cc8e6dc40f36635cd"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x9f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendfile(r1, r2, 0x0, 0x8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x2, &(0x7f0000000340)=[{&(0x7f0000000100)="e97e95750cb292bbc881b2ba1bbee897a1e81923840a879a3b6a78e346a1a034f5b9d329fb56060f7761a74b6a244a424e1d3d86154d5860e9c72044b5298359ca4b24327e525fb8bc4299acf33b561ebe59f29ded008db746d0590c885530b5e07628e51d9a2bf99ba8a52a8cd54a00b3794f68c4f49acf42a06f9510d51c24787bba2d72a46d2bf130ab8d57da731b856d68e4d0e8739bf9cf254c680f03f06f386ffea4a0e8ba692e31d4c43549e145c0e030ab2b5d54f5f2ba7b926c69ca5ec4e63adad9ed56702385028fe67534108e9c0136a78d7f", 0xd8, 0x7}, {&(0x7f0000000240)="3fb29ed5635ea76f424839e9596f5412902baae8e74151351bff70180b651ab891c7092188b6456963b60620d743e85b362dd86c3a2d4806206f067a88d76e0446fdf691fb214de8e204baf381d8db45905dbb2db04fad8a14732be32ff83cd55a26c46ecd64170c6a9f897279483a75c8d879343b4b80515cb128d4dbac818051f1776b25dd3d00749f5a44e36c708e6c324b0695513908bd963913d23249f29d22d9364f47dcde1ebbfb3e3cb2744b143e2bd14532a4ae80dee1eaef7dbec430319bde41e461c55f71155b2de1d81d82c196699b759ecd72949d9061", 0xdd, 0xf7f12f9}], 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x5b, "65f501b81751ffa846bc744b90d09b42f8a21af17378b05631a1d2de9f714c2a9b5f56e8b51bf79059adf19a1850085433793870056977d9b184ba8b82c4316c293b8f52c92ed103e9865e1c3eda61194136b3a81b89f4feaa2058"}, &(0x7f00000007c0)=0x63) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)={r4, 0xfff, 0x1, [0x0]}, &(0x7f0000000840)=0xa) accept4(r2, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000400)=0x80, 0x80000) 03:21:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xa00000000000000}, 0x0) 03:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) [ 548.874308] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) 03:21:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) 03:21:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x450003, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x503f789a, 0x9, 0x6}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000100)={0x32, 0x4, 0x0, {0x6, 0xfffffffffffffeff, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) 03:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 03:21:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'vxcan1\x00', 0xffffffffffffff58, 0x200}) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) 03:21:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:21:53 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') write$P9_RXATTRWALK(r0, 0x0, 0x0) 03:21:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x1000000000000000}, 0x0) 03:21:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc000, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 03:21:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:54 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x55f, 0x6, 0x91, 0x2, 0x6, 0x8000}}, 0x8) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage\x03\xb6(\xcea', 0x0, 0x0) [ 549.782883] net_ratelimit: 20 callbacks suppressed [ 549.782892] protocol 88fb is buggy, dev hsr_slave_0 [ 549.793012] protocol 88fb is buggy, dev hsr_slave_1 03:21:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 03:21:54 executing program 1: 03:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 03:21:54 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 550.022918] protocol 88fb is buggy, dev hsr_slave_0 [ 550.028055] protocol 88fb is buggy, dev hsr_slave_1 03:21:54 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) 03:21:54 executing program 1: 03:21:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = getpgrp(0x0) process_vm_writev(r1, &(0x7f00000015c0)=[{&(0x7f0000001380)=""/250, 0xfa}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001580)=""/61, 0x3d}], 0x4, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/207, 0xcf}, {&(0x7f0000001700)=""/181, 0xb5}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000002880)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000028c0)=0x1c) getsockname$inet6(r3, &(0x7f0000002900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002940)=0x1c) fsetxattr$security_evm(r2, &(0x7f0000002800)='security.evm\x00', &(0x7f0000002840)=ANY=[@ANYBLOB="00000300000080070034c98b5c79049ec0faa0d4d78b0a33cff72932a7ccc3b005579800079e4300393eb7b71f9725"], 0x3e, 0x3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x420000, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001300)={0x53, 0x0, 0x47, 0x3, @scatter={0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/202, 0xca}]}, &(0x7f0000000240)="5e5c9b6e3f8d0b4e8c4d1c9fce8eda6e99ed8b036cf881608a0f3cc8abe5591dff467b18129664962a491f4c4b5a6c423945147ed68d870c04cb727787ecce77cd5ed995e6797b", &(0x7f00000002c0)=""/4096, 0xa67, 0x20, 0xffffffffffffffff, &(0x7f00000012c0)}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) 03:21:54 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) [ 550.422996] protocol 88fb is buggy, dev hsr_slave_0 [ 550.428197] protocol 88fb is buggy, dev hsr_slave_1 03:21:54 executing program 1: 03:21:54 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000000)) bind$bt_hci(r2, &(0x7f0000001800)={0x1f, r3, 0x3}, 0xc) 03:21:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 03:21:55 executing program 1: [ 550.982904] protocol 88fb is buggy, dev hsr_slave_0 [ 550.988157] protocol 88fb is buggy, dev hsr_slave_1 [ 551.062907] protocol 88fb is buggy, dev hsr_slave_0 [ 551.068082] protocol 88fb is buggy, dev hsr_slave_1 03:21:55 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000000c0)="aee0527ea409cedddf59c49aa67ef638c699c013d731588f6e87deb964d10c69fb040324897de554816ec26983c3b54d72569029c1f52e0a0a1937ee39f39e61a2a74c60d8983e6748085c13f1deb4dc312973268b46b1c44729b6baecc19a79ee96619a1048c0c1af7feba8cd85", &(0x7f0000000240)="ee4fb0a20a17dd5c3a393f5efab21f5ca42106fdd24f62e42271596b9fc40341ba474ce31020a1e1a15e39794deeb3de31fe44d259b238ef7fd6e8301cb5e47e898d45ce47438feeb9d92dea052953696d5d721e0ed91565f994d4952788d76576050f6ca2033228beff83d1951f88f9fcaf492dbfc7fd115261ba14f87fa865d63e1c7eb1212d4b7d587d1a927684bf79ac55612078ea51ac94d4e530a52b6f1a065c3d1f75f789e3d1b60463b67d871e048d7343d4c4da6d3ca3545f7b1aa98cfca446b6bb36fa227d925f6678d0b813cb7f0a9dc0998f48285410a821b1f3e2ef288b886a9ec4b9ac04e428e9820dad7add", 0x2}, 0x20) sendfile(r1, r2, 0x0, 0x8) 03:21:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 03:21:55 executing program 1: 03:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 03:21:55 executing program 1: 03:21:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 03:21:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:21:55 executing program 1: 03:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 03:21:56 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8) 03:21:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:21:56 executing program 1: 03:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 03:21:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x44) sendfile(r1, r2, 0x0, 0x8) 03:21:56 executing program 1: 03:21:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 03:21:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:57 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:57 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ftruncate(r0, 0xc6e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgr\xc4\bQw\xef\x13\t\xf1t/\xa8\x9cM\x9d\xf0', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x413df636406c8bb7, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x81}}, 0x10) 03:21:57 executing program 1: 03:21:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 03:21:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) 03:21:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000001c0)="4d6ddcd14e13b9c04a1d697f37707c1656835e1f3e03f36a70c5cf0b27") r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x3f, 0x4) sendfile(r1, r3, 0x0, 0x8) write$capi20(r3, &(0x7f0000000100)={0x10, 0x7fff, 0x86, 0x82, 0x3f, 0x81b}, 0x10) ioctl$TIOCCONS(r3, 0x541d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) 03:21:57 executing program 1: 03:21:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:21:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 03:21:57 executing program 1: 03:21:58 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:21:58 executing program 1: 03:21:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000000014000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x3f, 0x1b1, &(0x7f0000000300)="37eccca768e3e8c4cbed9be56e9bbfe1cbeab62e7180ca7db8a26bfa03e741df72cb811550e5a7f3595ce0623e932266697f7d904e2da001aa512d034ce1dacb691af5d5a82969f58af7d11a898b00fdaae3fb1d942ffe81dff690f40f380ffc57a5e732c5474ff5eedfe3e99acd01552222f09b915a9eb02a823e6b3b09a6541033541d36c4709e99ec679117bed4d006ae168a50cc5036f10f442b44a2f7cf275078ddd040af6f82d83720b04721281684adf87791c9fe6e3c577adfb757157bc2a2db57343031a5a0268538", &(0x7f0000000400)="6a6b79909c88cd9df7db771d99938c6ed06369fb75649fd9a6af2df47d1a70b16b4d8c1494c31a737a7c91c1373e6ab0efa85556365eeca05ba1100dac542f939553187589dd7d21ad9d575b8b3163d33264b5a5fadc3bfb31f781665d3f93d01f9a544c879302f560352d2f76f7536d84d3ffb500ca44f68409716c07404b4a9139251ce2bf5d2d2ec455c422be", 0xcd, 0x8e}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000240)={0xa0, 0x0, 0x4, {{0x1, 0x1, 0x4, 0x0, 0x5, 0x5, {0x6, 0x0, 0x6, 0x7, 0x100, 0x8001, 0x3, 0x2, 0x2, 0x4, 0x2, r2, r3, 0x20, 0x565}}, {0x0, 0x2}}}, 0xa0) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x40000003, &(0x7f0000000000)=0x6, 0xfffffffffffffffe, 0x4) sendfile(r4, r5, 0x0, 0x8) 03:21:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x10000, 0x8000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000500)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x1, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) userfaultfd(0x800) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000540)={0x4, 0x0, 'client0\x00', 0x5, "21b09defb210544c", "b9d3441fac89f46b24ab7eca32a1ca0149d6fc19bc167d8d20340b5984db76a4", 0x5, 0x7fffffff}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="ef7c4c301ee6bd876614d1f719", 0xd}, {&(0x7f0000000080)="670e0f122a82dc9d9bf70f257e2e6eb1664899df05ca5052dda86192e373a41466bd2dc6ddc8bcb4b386678000aaee31f0432c708674ee3485b887b7a9b8b33cf2e6e5df369fe5884289db6de191b42c9892200f37e4303d9162555befc998b76afafe8369aaa44db862869cb6ec33029293d9a561526bba85f219dde801815ecde3361ec04f957c3e21c4f8c63b16d6b7c17c3aa37b375aa1600278518ce19dd31374e875ab5e201bb720bc087e96847eeb2e485542bc89a33fc87859dc78d766fad1b3f3ea0ba8303a8bcbb0df6664d083b684b37781a4e4fb1cf9e8580a80fd55b9e821f850d57d7a142d22965fb5d332b5f098", 0xf5}, {&(0x7f0000000180)="e9057fa9f759fba7d90442c31fc43560d6a238980251d86d504f4f2009dad905a64ae936e4d7211ceaa3618670ba8d9aa7754147ba48053cd6892d586f7574f89da107d1e2f262aebd9040b447b33754590ec6fbbf744db498178ac32997c49ca627a3812e3e4cc7bb6cf9ad4466f59cbe1aa580c61045c19c6bc40244952375b13c15d29eee44c72d135402b6b77db7", 0x90}, {&(0x7f0000000240)="ee7f82512c22706ed4aeb984d3fe7c8f5a85fe64c41375e1d7a467bb05088081138eb92ce931b07f590541ff9a389fb80640611a735b508c9b54d61528363f53770de30b39c9350353a73f98fd8e551f296629e4a6676c2f11728fed9a38e9415692fd195a95852ca8344a0a09c793dee02b4843898866bafb186e87e2c2fb253e1e975e3b106bdb035a96c53767", 0x8e}], 0x4, 0x0) 03:21:58 executing program 1: 03:21:58 executing program 5: 03:21:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:21:58 executing program 1: 03:21:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) write$P9_ROPEN(r3, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x10, 0x0, 0x2}}}, 0x18) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x9) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = fcntl$dupfd(r2, 0x0, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x9, @rand_addr="93b73d104e39177f1c3b0d9be58b313b", 0x9}, {0xa, 0x4e22, 0x9, @rand_addr="ce11fa94401084cfb3576cf088a6829a", 0x1}, 0xfffffffffffffffd, [0x239c, 0x400, 0x7, 0xb887, 0xe7, 0x40, 0x800]}, 0x5c) socket$nl_crypto(0x10, 0x3, 0x15) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="0fc7af39c83b973e0f0826820929660f38806e758fc9a894f70f0174ab7766baa100ed0f005000b805000000b900b000000f01c166ba410066b86f7366ef", 0x3e}], 0x1, 0x1, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 554.597546] *** Guest State *** [ 554.601050] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 554.611507] CR4: actual=0x0000000000002078, shadow=0x0000000000000038, gh_mask=ffffffffffffe871 [ 554.620617] CR3 = 0x0000000000004000 [ 554.624577] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 554.630702] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 554.636926] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 554.643802] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 554.651849] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.660028] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.668585] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.676645] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.684650] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.692618] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 554.700691] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 554.708750] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 554.716820] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 554.724864] EFER = 0x0000000000006501 PAT = 0x0007040600070406 [ 554.731269] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 554.738793] Interruptibility = 00000000 ActivityState = 00000000 [ 554.745155] *** Host State *** [ 554.748370] RIP = 0xffffffff811b34c0 RSP = 0xffff888096e678b8 [ 554.754441] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 554.760866] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 554.768726] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 554.774689] CR0=0000000080050033 CR3=00000000a8de5000 CR4=00000000001426f0 [ 554.781717] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 554.788448] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 554.795029] *** Control State *** [ 554.798488] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 554.805262] EntryControls=0000d3ff ExitControls=002fefff [ 554.810722] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 554.817736] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 554.824483] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 554.831068] reason=80000021 qualification=0000000000000000 [ 554.837466] IDTVectoring: info=00000000 errcode=00000000 [ 554.842980] TSC Offset = 0xfffffed497a30676 [ 554.847305] EPT pointer = 0x000000008894301e [ 554.893111] *** Guest State *** [ 554.896618] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 554.906235] CR4: actual=0x0000000000002078, shadow=0x0000000000000038, gh_mask=ffffffffffffe871 [ 554.919955] CR3 = 0x0000000000004000 [ 554.924101] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 554.930217] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 554.936715] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 554.945005] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 554.953604] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.961702] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.970040] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.978278] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 554.986332] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 03:21:59 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:21:59 executing program 5: 03:21:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:21:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:21:59 executing program 1: [ 554.994372] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 555.002361] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 555.010463] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 555.018509] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 555.026589] EFER = 0x0000000000006501 PAT = 0x0007040600070406 [ 555.033055] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 555.040518] Interruptibility = 00000000 ActivityState = 00000000 [ 555.072888] *** Host State *** [ 555.076143] RIP = 0xffffffff811b34c0 RSP = 0xffff88809ab1f8b8 [ 555.082141] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 03:21:59 executing program 5: 03:21:59 executing program 1: [ 555.137568] FSBase=00007effa9410700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 555.142883] net_ratelimit: 20 callbacks suppressed [ 555.142892] protocol 88fb is buggy, dev hsr_slave_0 [ 555.155526] protocol 88fb is buggy, dev hsr_slave_1 03:21:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 03:21:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 555.205291] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 555.211244] CR0=0000000080050033 CR3=00000000a8de5000 CR4=00000000001426e0 [ 555.222870] protocol 88fb is buggy, dev hsr_slave_0 [ 555.227972] protocol 88fb is buggy, dev hsr_slave_1 03:21:59 executing program 5: [ 555.287388] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 03:21:59 executing program 1: [ 555.339275] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 555.357850] *** Control State *** [ 555.369238] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 555.382880] protocol 88fb is buggy, dev hsr_slave_0 [ 555.387995] protocol 88fb is buggy, dev hsr_slave_1 [ 555.418264] EntryControls=0000d3ff ExitControls=002fefff [ 555.427135] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 555.460272] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 555.492037] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 555.503036] reason=80000021 qualification=0000000000000000 [ 555.509398] IDTVectoring: info=00000000 errcode=00000000 03:21:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 555.543566] TSC Offset = 0xfffffed497a30676 [ 555.551528] EPT pointer = 0x000000008894301e 03:22:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:00 executing program 5: 03:22:00 executing program 1: 03:22:00 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x323040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000500)={0x9, 0x1000, 0x9}) syz_emit_ethernet(0x267, &(0x7f0000000080)={@remote, @link_local, [{[{0x9100, 0x93, 0x800, 0x1}], {0x8100, 0x100000000, 0x4, 0x3}}], {@ipv6={0x86dd, {0x40, 0x6, "3984b4", 0x229, 0x3b, 0x18c000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, @empty, {[@routing={0x97, 0x6, 0x2, 0x3, 0x0, [@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote]}, @dstopts={0x3f, 0x2, [], [@hao={0xc9, 0x10, @local}]}, @dstopts={0x5c, 0x1, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @srh={0x8, 0x4, 0x4, 0x2, 0x6, 0x20, 0x3f, [@remote, @remote]}, @fragment={0xbb, 0x0, 0x9, 0xffff, 0x0, 0x7f, 0x66}, @dstopts={0x0, 0x2, [], [@ra={0x5, 0x2, 0x1}, @pad1, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x80000001}]}, @srh={0x7f, 0x2, 0x4, 0x1, 0x100000000, 0x40, 0x7fff, [@rand_addr="3b515733720fa9cc77439e430e39f05b"]}, @fragment={0x2e, 0x0, 0x9, 0x2, 0x0, 0x9, 0x66}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x10001, 0x0, 0x7, 0xca, 0x4, [{0xf, 0x7, "e97a6accb69f0112fbd5603c74ae761f455130eea55c3092fa10c55b4bd67f1ed0608dd8b9d5696b38136d82c8a7de6eef58cdd210f52fe92861"}, {0x22, 0x1f, "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"}]}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xf5, 0x73d, 0x9ac, 0x7bc]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x800000000, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c83ef8d}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:22:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:22:00 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) [ 556.022909] protocol 88fb is buggy, dev hsr_slave_0 [ 556.028031] protocol 88fb is buggy, dev hsr_slave_1 03:22:00 executing program 1: 03:22:00 executing program 5: 03:22:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:22:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 556.173791] *** Guest State *** [ 556.177270] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 556.203277] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 03:22:00 executing program 5: [ 556.253351] CR3 = 0x0000000000000000 [ 556.257121] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 556.272911] protocol 88fb is buggy, dev hsr_slave_0 [ 556.278108] protocol 88fb is buggy, dev hsr_slave_1 03:22:00 executing program 1: [ 556.325431] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 556.331475] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:22:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:00 executing program 5: 03:22:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 556.441869] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.512038] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.556634] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.587104] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.617110] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.659476] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.670022] GDTR: limit=0x00000000, base=0x0000000000000000 [ 556.678413] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.686825] IDTR: limit=0x00000000, base=0x0000000000000000 [ 556.695279] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.706467] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 556.713276] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 556.720749] Interruptibility = 00000000 ActivityState = 00000000 [ 556.727446] *** Host State *** [ 556.730658] RIP = 0xffffffff811b34c0 RSP = 0xffff88805da378b8 [ 556.736825] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 556.743415] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 556.751223] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 556.757282] CR0=0000000080050033 CR3=000000005893e000 CR4=00000000001426f0 [ 556.764379] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 556.771109] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 556.777288] *** Control State *** [ 556.780748] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 556.787483] EntryControls=0000d3ff ExitControls=002fefff [ 556.793013] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 556.799945] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 556.806679] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 556.813345] reason=80000021 qualification=0000000000000000 [ 556.819656] IDTVectoring: info=00000000 errcode=00000000 [ 556.825193] TSC Offset = 0xfffffed3c0d24024 [ 556.829533] EPT pointer = 0x000000007d81d01e [ 556.853056] *** Guest State *** [ 556.856486] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 556.865912] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 556.874928] CR3 = 0x0000000000000000 [ 556.878650] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 556.885531] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 556.891524] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 556.898339] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.910126] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.918287] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.926438] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.934598] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.942581] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.950751] GDTR: limit=0x00000000, base=0x0000000000000000 [ 556.958806] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.966858] IDTR: limit=0x00000000, base=0x0000000000000000 [ 556.974913] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 556.982959] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 556.989382] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 556.996909] Interruptibility = 00000000 ActivityState = 00000000 [ 557.003335] *** Host State *** [ 557.006555] RIP = 0xffffffff811b34c0 RSP = 0xffff8880992cf8b8 [ 557.014925] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 557.021368] FSBase=00007effa9431700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 557.029317] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 557.035326] CR0=0000000080050033 CR3=000000005893e000 CR4=00000000001426f0 [ 557.042355] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 557.049137] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 557.055238] *** Control State *** [ 557.058685] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 557.065424] EntryControls=0000d3ff ExitControls=002fefff [ 557.070896] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 557.077878] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 557.084619] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 557.091251] reason=80000021 qualification=0000000000000000 [ 557.097639] IDTVectoring: info=00000000 errcode=00000000 03:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 03:22:01 executing program 1: 03:22:01 executing program 5: 03:22:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80200, 0x89) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1c1001) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 03:22:01 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) [ 557.103157] TSC Offset = 0xfffffed360457676 [ 557.107506] EPT pointer = 0x000000004d85001e 03:22:01 executing program 5: 03:22:01 executing program 1: 03:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 03:22:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 03:22:01 executing program 5: 03:22:01 executing program 1: 03:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 03:22:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r3, 0x8, r4) r5 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=':$\x00', 0xfffffffffffffffc) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000001500)}}, 0x10) keyctl$get_security(0x11, r5, &(0x7f0000000500)=""/4096, 0x1000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/user\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:01 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 03:22:01 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) [ 557.698872] *** Guest State *** [ 557.702223] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 557.714871] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 557.727514] CR3 = 0x0000000000000000 [ 557.731362] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 557.740896] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 557.755733] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 557.773662] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.807243] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.840676] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.862345] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.880146] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.909013] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.922629] GDTR: limit=0x00000000, base=0x0000000000000000 [ 557.932525] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.947406] IDTR: limit=0x00000000, base=0x0000000000000000 [ 557.957732] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 557.971212] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 557.979417] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 557.992403] Interruptibility = 00000000 ActivityState = 00000000 [ 558.000562] *** Host State *** [ 558.009261] RIP = 0xffffffff811b34c0 RSP = 0xffff88805da578b8 03:22:02 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:22:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) [ 558.033884] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 558.054487] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 558.089520] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 558.127873] CR0=0000000080050033 CR3=0000000059f59000 CR4=00000000001426f0 [ 558.175332] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 558.200158] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 558.213124] *** Control State *** [ 558.216747] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 03:22:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:22:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x0, 0x0, [0x20000048d]}) [ 558.227732] EntryControls=0000d3ff ExitControls=002fefff [ 558.270065] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 558.282985] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 558.311474] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:22:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x0, 0x0, [0x20000048d]}) [ 558.360037] reason=80000021 qualification=0000000000000000 [ 558.389603] IDTVectoring: info=00000000 errcode=00000000 03:22:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:22:02 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) [ 558.445266] TSC Offset = 0xfffffed2ef6813ef [ 558.449827] EPT pointer = 0x000000008e69b01e 03:22:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40040, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x5, 0x2, 0x0, 0x100}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)='+:wlan0^@/cgroup\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r4, 0x0, 0x6, &(0x7f00000000c0)='user/\x00', r5}, 0x30) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000780)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="88342e4a57e1270b1fca8e4f7c5d84ac712405eef71b7cc988f1dc44140ee2950795d039b0eab3e7e6b316467de0ea5573ecba5522e4ba4a2a5357dc8595a1782c94d7c6b7d416b328bfa01fca70fd6720e9d592a15c42fc71668371468e62e5004345ce18597e24cb5b41d151eb360c48d22e8b9bfb96ea06c423d6e2b7a289cc94e259d2c5d79b65e6a076714126b70473167f553c606fcef30f6f3bad5f4ad15eef98ea6746a0ba32ec8327823ee58fb20d329fd7bcb3", 0xb8}, {&(0x7f0000000880)="cd497ea5f1df099c0b0105d43b8009bc2a7928256715b8fd8cf132fdf44cbcd97716b6a2d4e868730a62a766a43ad9adbb96ecbe451fb7e537fb002cafc2d7694b5dfcd0c6bfe6e820ca66cdc71d5a365befbbb80321c9de63d7cf522b5b17a6a44c40faa0e3c37b868794294955e567eee205e6602df091314c8333", 0x7c}], 0x2, 0x0, 0x0, 0xc0}, 0x8004) 03:22:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x0, 0x0, [0x20000048d]}) 03:22:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 558.771771] *** Guest State *** [ 558.784801] hfs: unable to change codepage [ 558.789279] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 558.825091] hfs: unable to parse mount options [ 558.835612] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 558.876070] CR3 = 0x0000000000000000 [ 558.892736] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 558.971789] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 559.021111] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 559.050368] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:22:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000780)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="88342e4a57e1270b1fca8e4f7c5d84ac712405eef71b7cc988f1dc44140ee2950795d039b0eab3e7e6b316467de0ea5573ecba5522e4ba4a2a5357dc8595a1782c94d7c6b7d416b328bfa01fca70fd6720e9d592a15c42fc71668371468e62e5004345ce18597e24cb5b41d151eb360c48d22e8b9bfb96ea06c423d6e2b7a289cc94e259d2c5d79b65e6a076714126b70473167f553c606fcef30f6f3bad5f4ad15eef98ea6746a0ba32ec8327823ee58fb20d329fd7bcb3", 0xb8}, {&(0x7f0000000880)="cd497ea5f1df099c0b0105d43b8009bc2a7928256715b8fd8cf132fdf44cbcd97716b6a2d4e868730a62a766a43ad9adbb96ecbe451fb7e537fb002cafc2d7694b5dfcd0c6bfe6e820ca66cdc71d5a365befbbb80321c9de63d7cf522b5b17a6a44c40faa0e3c37b868794294955e567eee205e6602df091314c8333", 0x7c}], 0x2, 0x0, 0x0, 0xc0}, 0x8004) 03:22:03 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b}) [ 559.076343] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 559.131829] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:22:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b}) [ 559.230503] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 559.266460] hfs: unable to change codepage [ 559.300016] hfs: unable to parse mount options [ 559.320979] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000780)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="88342e4a57e1270b1fca8e4f7c5d84ac712405eef71b7cc988f1dc44140ee2950795d039b0eab3e7e6b316467de0ea5573ecba5522e4ba4a2a5357dc8595a1782c94d7c6b7d416b328bfa01fca70fd6720e9d592a15c42fc71668371468e62e5004345ce18597e24cb5b41d151eb360c48d22e8b9bfb96ea06c423d6e2b7a289cc94e259d2c5d79b65e6a076714126b70473167f553c606fcef30f6f3bad5f4ad15eef98ea6746a0ba32ec8327823ee58fb20d329fd7bcb3", 0xb8}, {&(0x7f0000000880)="cd497ea5f1df099c0b0105d43b8009bc2a7928256715b8fd8cf132fdf44cbcd97716b6a2d4e868730a62a766a43ad9adbb96ecbe451fb7e537fb002cafc2d7694b5dfcd0c6bfe6e820ca66cdc71d5a365befbbb80321c9de63d7cf522b5b17a6a44c40faa0e3c37b868794294955e567eee205e6602df091314c8333", 0x7c}], 0x2, 0x0, 0x0, 0xc0}, 0x8004) [ 559.391230] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 559.463987] GDTR: limit=0x00000000, base=0x0000000000000000 03:22:03 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) [ 559.523068] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 559.531111] IDTR: limit=0x00000000, base=0x0000000000000000 [ 559.531130] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 559.531141] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 559.531152] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 559.531162] Interruptibility = 00000000 ActivityState = 00000000 [ 559.531166] *** Host State *** [ 559.531178] RIP = 0xffffffff811b34c0 RSP = 0xffff88807ea7f8b8 [ 559.531213] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 559.587705] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 559.625335] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 559.632486] hfs: unable to change codepage [ 559.651311] CR0=0000000080050033 CR3=000000004dc3f000 CR4=00000000001426f0 [ 559.675373] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 559.675903] hfs: unable to parse mount options [ 559.682842] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 559.698946] *** Control State *** [ 559.703065] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 559.710770] EntryControls=0000d3ff ExitControls=002fefff [ 559.740015] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 559.748075] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 559.756028] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 559.763167] reason=80000021 qualification=0000000000000000 [ 559.769644] IDTVectoring: info=00000000 errcode=00000000 [ 559.791580] TSC Offset = 0xfffffed25d1a63fa [ 559.800239] EPT pointer = 0x00000000989b501e 03:22:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:22:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 03:22:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b}) 03:22:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 559.975260] hfs: unable to change codepage [ 560.017258] hfs: unable to parse mount options 03:22:04 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0x66, 0x7c, @buffer={0x0, 0x30, &(0x7f0000000100)=""/48}, &(0x7f0000000140)="071f51a3bd039bf62be10fadfef9b2d10e331e7e19876a56e28dc978e9f4d7af49b8d41d289e38978924752a6cd78ed481dee57344ce3ed33d19097264d792fcff8550481a768b4f9214749efd3b1cc6bc9cac10a706c3e7a9d3d5b38487ff40147a706ccc4d", &(0x7f00000001c0)=""/158, 0x9, 0x10, 0x3, &(0x7f0000000280)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:22:04 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 560.182862] net_ratelimit: 20 callbacks suppressed [ 560.182871] protocol 88fb is buggy, dev hsr_slave_0 [ 560.193079] protocol 88fb is buggy, dev hsr_slave_1 03:22:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 560.357740] FAULT_INJECTION: forcing a failure. [ 560.357740] name failslab, interval 1, probability 0, space 0, times 0 [ 560.394626] hfs: invalid gid -1 [ 560.396684] *** Guest State *** [ 560.401275] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 560.402837] hfs: unable to parse mount options [ 560.422901] protocol 88fb is buggy, dev hsr_slave_0 [ 560.428034] protocol 88fb is buggy, dev hsr_slave_1 [ 560.451690] CPU: 0 PID: 30323 Comm: syz-executor.3 Not tainted 5.0.0-rc7+ #85 [ 560.459027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.465197] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 560.468395] Call Trace: [ 560.468428] dump_stack+0x172/0x1f0 [ 560.468452] should_fail.cold+0xa/0x1b [ 560.468473] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 560.492513] ? lock_downgrade+0x810/0x810 [ 560.496684] ? ___might_sleep+0x163/0x280 [ 560.500882] __should_failslab+0x121/0x190 [ 560.505166] should_failslab+0x9/0x14 [ 560.508999] __kmalloc_track_caller+0x2d8/0x740 [ 560.513695] ? msr_io+0xf6/0x2e0 [ 560.517082] memdup_user+0x26/0xb0 [ 560.520636] msr_io+0xf6/0x2e0 [ 560.523840] ? kvm_set_msr+0x380/0x380 [ 560.527741] ? emulator_set_hflags+0xa0/0xa0 [ 560.532157] ? lock_acquire+0x16f/0x3f0 [ 560.536166] ? kvm_arch_vcpu_ioctl+0x184e/0x2fa0 [ 560.540964] kvm_arch_vcpu_ioctl+0x18a0/0x2fa0 [ 560.545560] ? kvm_arch_vcpu_ioctl+0x184e/0x2fa0 [ 560.550326] ? mark_held_locks+0x100/0x100 [ 560.551105] CR3 = 0x0000000000000000 [ 560.554571] ? mark_held_locks+0x100/0x100 [ 560.554592] ? kvm_arch_vcpu_put+0x430/0x430 [ 560.554608] ? mark_held_locks+0x100/0x100 [ 560.554630] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 560.554646] ? lock_acquire+0x16f/0x3f0 [ 560.554661] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 560.554685] ? __mutex_lock+0x3cd/0x1310 [ 560.554701] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 560.554720] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 560.554735] ? mutex_trylock+0x1e0/0x1e0 [ 560.588945] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 560.592083] ? _kstrtoul+0x170/0x170 [ 560.592101] ? get_pid_task+0xd4/0x190 [ 560.592116] ? find_held_lock+0x35/0x130 [ 560.592131] ? get_pid_task+0xd4/0x190 [ 560.622784] ? __lock_acquire+0x53b/0x4700 [ 560.627042] kvm_vcpu_ioctl+0x8f6/0xfa0 [ 560.631029] ? kvm_vcpu_block+0xcd0/0xcd0 [ 560.635202] ? mark_held_locks+0x100/0x100 [ 560.639451] ? proc_fail_nth_write+0x9d/0x1e0 [ 560.643962] ? proc_cwd_link+0x1d0/0x1d0 [ 560.648035] ? __f_unlock_pos+0x19/0x20 [ 560.652019] ? find_held_lock+0x35/0x130 [ 560.656091] ? __fget+0x340/0x540 [ 560.659550] ? find_held_lock+0x35/0x130 [ 560.663621] ? __fget+0x340/0x540 [ 560.667089] ? kvm_vcpu_block+0xcd0/0xcd0 [ 560.671250] do_vfs_ioctl+0xd6e/0x1390 [ 560.675147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.680706] ? selinux_file_ioctl+0x125/0x5e0 [ 560.685222] ? ioctl_preallocate+0x210/0x210 [ 560.689643] ? selinux_file_mprotect+0x620/0x620 [ 560.694435] ? iterate_fd+0x360/0x360 [ 560.698250] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 560.703800] ? fput+0x128/0x1a0 [ 560.707099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.712658] ? security_file_ioctl+0x93/0xc0 [ 560.717082] ksys_ioctl+0xab/0xd0 [ 560.720554] __x64_sys_ioctl+0x73/0xb0 [ 560.724454] do_syscall_64+0x103/0x610 [ 560.728366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 560.733563] RIP: 0033:0x457e29 [ 560.736762] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 560.755678] RSP: 002b:00007f06d088fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.763407] RAX: ffffffffffffffda RBX: 00007f06d088fc90 RCX: 0000000000457e29 [ 560.770696] RDX: 0000000020000080 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 560.777984] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 560.785268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06d08906d4 [ 560.792558] R13: 00000000004c09b0 R14: 00000000004d27c8 R15: 0000000000000006 03:22:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 560.814890] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 560.822601] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 560.829542] protocol 88fb is buggy, dev hsr_slave_0 [ 560.829593] protocol 88fb is buggy, dev hsr_slave_1 03:22:05 executing program 5 (fault-call:7 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 560.855280] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 560.875721] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 560.893967] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 560.929762] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 560.947442] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 560.965369] hfs: invalid gid -1 [ 560.968910] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:05 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 560.980809] hfs: unable to parse mount options [ 560.989617] GDTR: limit=0x00000000, base=0x0000000000000000 [ 561.005251] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.025923] FAULT_INJECTION: forcing a failure. [ 561.025923] name failslab, interval 1, probability 0, space 0, times 0 [ 561.037259] IDTR: limit=0x00000000, base=0x0000000000000000 [ 561.037281] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.037292] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 561.037305] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 561.037315] Interruptibility = 00000000 ActivityState = 00000000 [ 561.037320] *** Host State *** [ 561.037332] RIP = 0xffffffff811b34c0 RSP = 0xffff8880841df8b8 [ 561.037354] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 561.037367] FSBase=00007effa9452700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 561.037380] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 561.066137] CPU: 1 PID: 30344 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 561.089256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.089262] Call Trace: [ 561.089289] dump_stack+0x172/0x1f0 [ 561.089310] should_fail.cold+0xa/0x1b [ 561.103007] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 561.103025] ? lock_downgrade+0x810/0x810 [ 561.103043] ? ___might_sleep+0x163/0x280 [ 561.103060] __should_failslab+0x121/0x190 [ 561.103078] should_failslab+0x9/0x14 [ 561.103097] kmem_cache_alloc_trace+0x2d1/0x760 [ 561.119749] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 561.119770] __request_module+0x327/0xb86 [ 561.119792] ? find_inlist_lock.constprop.0+0x124/0x230 [ 561.125999] ? free_modprobe_argv+0xa0/0xa0 [ 561.126014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:22:05 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 561.126033] ? lock_downgrade+0x810/0x810 [ 561.126053] ? __might_fault+0x12b/0x1e0 [ 561.126073] ? cache_grow_begin.cold+0x2d/0x31 [ 561.126092] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 561.130314] CR0=0000000080050033 CR3=000000005a2bb000 CR4=00000000001426e0 [ 561.135074] ? wait_for_completion+0x440/0x440 [ 561.135106] find_inlist_lock.constprop.0+0x124/0x230 [ 561.135124] do_ebt_get_ctl+0x153/0x670 [ 561.135141] ? copy_everything_to_user+0x1080/0x1080 [ 561.135156] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 561.135173] ? find_held_lock+0x35/0x130 [ 561.139499] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 561.143501] ? mutex_unlock+0xd/0x10 [ 561.143518] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 561.143533] nf_getsockopt+0x80/0xe0 [ 561.143552] ip_getsockopt+0x176/0x1d0 [ 561.143569] ? do_ip_getsockopt+0x1830/0x1830 [ 561.143588] ? kasan_check_write+0x14/0x20 [ 561.147972] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 561.151624] udp_getsockopt+0x68/0xa0 [ 561.151650] sock_common_getsockopt+0x9a/0xe0 [ 561.151667] __sys_getsockopt+0x168/0x250 [ 561.151683] ? kernel_setsockopt+0x1e0/0x1e0 [ 561.156539] *** Control State *** [ 561.161806] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 561.161823] ? do_syscall_64+0x26/0x610 [ 561.161839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.161853] ? do_syscall_64+0x26/0x610 [ 561.161874] __x64_sys_getsockopt+0xbe/0x150 [ 561.161892] do_syscall_64+0x103/0x610 [ 561.175825] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 03:22:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 561.181264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.181278] RIP: 0033:0x457e29 [ 561.181294] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.181302] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 561.187114] *** Guest State *** [ 561.189520] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 561.189529] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000003 [ 561.189539] RBP: 000000000073bf00 R08: 0000000020000040 R09: 0000000000000000 [ 561.189548] R10: 0000000020000200 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 561.189557] R13: 00000000004c8c48 R14: 00000000004cf6f0 R15: 0000000000000005 [ 561.268560] EntryControls=0000d3ff ExitControls=002fefff [ 561.343927] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 561.363463] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 561.363477] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 561.392899] protocol 88fb is buggy, dev hsr_slave_0 [ 561.403535] protocol 88fb is buggy, dev hsr_slave_1 [ 561.462956] protocol 88fb is buggy, dev hsr_slave_0 [ 561.468117] protocol 88fb is buggy, dev hsr_slave_1 [ 561.499155] CR3 = 0x0000000000000000 [ 561.513522] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 561.521415] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 561.535058] hfs: invalid gid -1 [ 561.545357] hfs: unable to parse mount options [ 561.551192] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 561.561877] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 561.563517] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 561.574648] reason=80000021 qualification=0000000000000000 [ 561.575915] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.581773] IDTVectoring: info=00000000 errcode=00000000 [ 561.595571] TSC Offset = 0xfffffed17fb2f20b [ 561.600061] EPT pointer = 0x00000000962f101e [ 561.601363] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.633816] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.648041] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.665612] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.674113] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.682213] GDTR: limit=0x00000000, base=0x0000000000000000 [ 561.690979] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.700446] IDTR: limit=0x00000000, base=0x0000000000000000 [ 561.709034] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 561.717471] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 561.724332] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 561.731916] Interruptibility = 00000000 ActivityState = 00000000 [ 561.738646] *** Host State *** [ 561.741945] RIP = 0xffffffff811b34c0 RSP = 0xffff88807fd378b8 [ 561.748417] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 561.755229] FSBase=00007effa93ce700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 561.763438] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 561.769366] CR0=0000000080050033 CR3=000000005a2bb000 CR4=00000000001426f0 [ 561.776477] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 561.783222] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 561.789281] *** Control State *** [ 561.792722] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 03:22:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x15, 0x6, 0x80}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000080)) [ 561.799456] EntryControls=0000d3ff ExitControls=002fefff [ 561.804953] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 561.811869] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 561.818608] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 561.825264] reason=80000021 qualification=0000000000000000 [ 561.831583] IDTVectoring: info=00000000 errcode=00000000 [ 561.837117] TSC Offset = 0xfffffed10faa7c44 [ 561.841482] EPT pointer = 0x000000008b71001e 03:22:06 executing program 5 (fault-call:7 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 561.961860] hfs: unable to change codepage [ 561.973911] FAULT_INJECTION: forcing a failure. [ 561.973911] name failslab, interval 1, probability 0, space 0, times 0 [ 561.978076] hfs: unable to parse mount options [ 562.010268] CPU: 1 PID: 30380 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 562.017607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.026975] Call Trace: [ 562.029599] dump_stack+0x172/0x1f0 [ 562.033258] should_fail.cold+0xa/0x1b [ 562.037170] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 562.042303] ? lock_downgrade+0x810/0x810 [ 562.046466] ? ___might_sleep+0x163/0x280 [ 562.050630] __should_failslab+0x121/0x190 [ 562.054876] should_failslab+0x9/0x14 [ 562.058685] __kmalloc_track_caller+0x2d8/0x740 [ 562.063373] ? rcu_read_lock_sched_held+0x110/0x130 [ 562.068396] ? kmem_cache_alloc_trace+0x354/0x760 [ 562.073248] ? __request_module+0x345/0xb86 [ 562.077582] kstrdup+0x3a/0x70 [ 562.080784] __request_module+0x345/0xb86 [ 562.084946] ? find_inlist_lock.constprop.0+0x124/0x230 [ 562.090321] ? free_modprobe_argv+0xa0/0xa0 [ 562.094650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 562.100202] ? lock_downgrade+0x810/0x810 [ 562.104361] ? __might_fault+0x12b/0x1e0 [ 562.108430] ? cache_grow_begin.cold+0x2d/0x31 [ 562.113018] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 562.117873] ? wait_for_completion+0x440/0x440 [ 562.122478] find_inlist_lock.constprop.0+0x124/0x230 [ 562.127685] do_ebt_get_ctl+0x153/0x670 [ 562.131676] ? copy_everything_to_user+0x1080/0x1080 [ 562.136794] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 562.141649] ? find_held_lock+0x35/0x130 [ 562.145740] ? mutex_unlock+0xd/0x10 [ 562.149466] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 562.154752] nf_getsockopt+0x80/0xe0 [ 562.158482] ip_getsockopt+0x176/0x1d0 [ 562.162379] ? do_ip_getsockopt+0x1830/0x1830 [ 562.166891] ? kasan_check_write+0x14/0x20 [ 562.171142] udp_getsockopt+0x68/0xa0 [ 562.174956] sock_common_getsockopt+0x9a/0xe0 [ 562.179458] __sys_getsockopt+0x168/0x250 [ 562.183615] ? kernel_setsockopt+0x1e0/0x1e0 [ 562.188041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 562.192806] ? do_syscall_64+0x26/0x610 [ 562.196805] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.202202] ? do_syscall_64+0x26/0x610 [ 562.206205] __x64_sys_getsockopt+0xbe/0x150 [ 562.210837] do_syscall_64+0x103/0x610 [ 562.214766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.219956] RIP: 0033:0x457e29 [ 562.223149] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 562.242072] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 562.249801] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 03:22:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) [ 562.257086] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000003 [ 562.264373] RBP: 000000000073bf00 R08: 0000000020000040 R09: 0000000000000000 [ 562.271662] R10: 0000000020000200 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 562.279044] R13: 00000000004c8c48 R14: 00000000004cf6f0 R15: 0000000000000005 03:22:06 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r1 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x2, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) [ 562.494327] hfs: unable to change codepage [ 562.498621] hfs: unable to parse mount options 03:22:06 executing program 5 (fault-call:7 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:06 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 562.672628] FAULT_INJECTION: forcing a failure. [ 562.672628] name failslab, interval 1, probability 0, space 0, times 0 [ 562.714725] CPU: 0 PID: 30409 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 562.722058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.731443] Call Trace: [ 562.731478] dump_stack+0x172/0x1f0 [ 562.731500] should_fail.cold+0xa/0x1b [ 562.741592] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 562.746702] ? lock_downgrade+0x810/0x810 [ 562.750862] ? ___might_sleep+0x163/0x280 [ 562.750882] __should_failslab+0x121/0x190 [ 562.750910] should_failslab+0x9/0x14 [ 562.763101] kmem_cache_alloc_trace+0x2d1/0x760 [ 562.767783] ? rcu_read_lock_sched_held+0x110/0x130 [ 562.772813] ? __kmalloc_track_caller+0x5d1/0x740 [ 562.777676] call_usermodehelper_setup+0x9b/0x320 [ 562.782527] ? dec_ucount+0x250/0x250 [ 562.786344] __request_module+0x440/0xb86 [ 562.790504] ? find_inlist_lock.constprop.0+0x124/0x230 [ 562.790519] ? free_modprobe_argv+0xa0/0xa0 [ 562.790535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 562.790554] ? lock_downgrade+0x810/0x810 [ 562.809902] ? __might_fault+0x12b/0x1e0 [ 562.809925] ? cache_grow_begin.cold+0x2d/0x31 [ 562.809944] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 562.823416] ? wait_for_completion+0x440/0x440 [ 562.828025] find_inlist_lock.constprop.0+0x124/0x230 [ 562.833255] do_ebt_get_ctl+0x153/0x670 [ 562.837243] ? copy_everything_to_user+0x1080/0x1080 [ 562.842363] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 562.847228] ? find_held_lock+0x35/0x130 [ 562.851314] ? mutex_unlock+0xd/0x10 [ 562.855040] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 562.860416] nf_getsockopt+0x80/0xe0 [ 562.863401] hfs: unable to change codepage [ 562.864143] ip_getsockopt+0x176/0x1d0 [ 562.864164] ? do_ip_getsockopt+0x1830/0x1830 [ 562.864203] ? kasan_check_write+0x14/0x20 [ 562.864225] udp_getsockopt+0x68/0xa0 [ 562.872908] hfs: unable to parse mount options [ 562.876830] sock_common_getsockopt+0x9a/0xe0 [ 562.876851] __sys_getsockopt+0x168/0x250 [ 562.876868] ? kernel_setsockopt+0x1e0/0x1e0 [ 562.876889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 562.907251] ? do_syscall_64+0x26/0x610 [ 562.911241] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.916621] ? do_syscall_64+0x26/0x610 [ 562.920622] __x64_sys_getsockopt+0xbe/0x150 [ 562.925051] do_syscall_64+0x103/0x610 [ 562.928952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.934149] RIP: 0033:0x457e29 [ 562.937355] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 562.956358] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 03:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4b47, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) [ 562.964089] RAX: ffffffffffffffda RBX: 00007f15fc55fc90 RCX: 0000000000457e29 [ 562.971380] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000003 [ 562.978665] RBP: 000000000073bf00 R08: 0000000020000040 R09: 0000000000000000 [ 562.985946] R10: 0000000020000200 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 562.993231] R13: 00000000004c8c48 R14: 00000000004cf6f0 R15: 0000000000000005 03:22:07 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) 03:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4b49, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 563.096048] *** Guest State *** [ 563.105033] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 563.127159] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 563.167204] CR3 = 0x0000000000000000 [ 563.177128] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 563.184377] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 563.190910] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 563.202539] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.218799] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.227104] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.247064] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:07 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) [ 563.270791] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.280572] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.288842] GDTR: limit=0x00000000, base=0x0000000000000000 [ 563.308401] hfs: unable to change codepage [ 563.309011] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x0) [ 563.322937] hfs: unable to parse mount options 03:22:07 executing program 1: r0 = getgid() syz_mount_image$hfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 563.351898] IDTR: limit=0x00000000, base=0x0000000000000000 [ 563.363943] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 563.379899] EFER = 0x0000000000006500 PAT = 0x0007040600070406 03:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x541b, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 563.423072] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 563.431991] Interruptibility = 00000000 ActivityState = 00000000 [ 563.438660] *** Host State *** [ 563.442014] RIP = 0xffffffff811b34c0 RSP = 0xffff88807dbc78b8 [ 563.460113] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 563.485357] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 563.494281] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 563.516552] CR0=0000000080050033 CR3=00000000a863d000 CR4=00000000001426f0 03:22:07 executing program 5 (fault-call:7 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 563.545469] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 563.574259] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 563.580553] *** Control State *** [ 563.588152] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 563.649461] EntryControls=0000d3ff ExitControls=002fefff [ 563.695870] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 563.741617] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 563.764474] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 563.771197] reason=80000021 qualification=0000000000000000 [ 563.778722] IDTVectoring: info=00000000 errcode=00000000 [ 563.785288] TSC Offset = 0xfffffed009137abe [ 563.789621] EPT pointer = 0x00000000a9be401e 03:22:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0) 03:22:08 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:08 executing program 1: r0 = getgid() syz_mount_image$hfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) open_by_handle_at(r1, &(0x7f0000000000)={0x3b, 0x1ff, "11113caaf88c5f687cecf520b6ff32ad4e610cb8a6ad3ca846b4ff1298bda6841d2dc5791686a10b7b533ae89fcbafd85bfd4a"}, 0x640002) eventfd2(0x100000001, 0x800) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5421, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) 03:22:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x2, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 564.020420] *** Guest State *** 03:22:08 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:08 executing program 1: r0 = getgid() syz_mount_image$hfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 564.053335] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 03:22:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5450, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 564.130552] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 03:22:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x11, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xe00000000000000}, 0x0) 03:22:08 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) [ 564.181628] CR3 = 0x0000000000000000 [ 564.197008] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 564.209511] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 564.220391] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 564.257424] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.308434] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.323929] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.332163] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.350883] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.375743] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.388849] GDTR: limit=0x00000000, base=0x0000000000000000 [ 564.412099] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:08 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 564.421367] IDTR: limit=0x00000000, base=0x0000000000000000 [ 564.439963] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.452012] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 564.461087] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 564.469028] Interruptibility = 00000000 ActivityState = 00000000 [ 564.507874] *** Host State *** [ 564.523124] RIP = 0xffffffff811b34c0 RSP = 0xffff88804baa78b8 [ 564.551480] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 564.564920] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 564.579918] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 564.599720] CR0=0000000080050033 CR3=0000000090d9d000 CR4=00000000001426f0 [ 564.620069] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 564.630873] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 564.646016] *** Control State *** [ 564.652144] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 564.666654] EntryControls=0000d3ff ExitControls=002fefff [ 564.676754] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 564.686860] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 564.694598] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 564.701594] reason=80000021 qualification=0000000000000000 [ 564.714305] IDTVectoring: info=00000000 errcode=00000000 [ 564.726010] TSC Offset = 0xfffffecf8de69ff6 [ 564.730481] EPT pointer = 0x000000008c0f101e 03:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x0, 0x400000004, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) 03:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5451, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x1100, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:09 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:09 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0xffffffff, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x4000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0) 03:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5452, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:09 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x8800, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0) 03:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x32, 0x5, 0x3, 0x10, 0x8, 0x13, 0x5, 0x9b, 0xffffffffffffffff}) 03:22:09 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="0c1870b9aef9992b192549c197fcc4b4bfefcca79ca561ce82e6d7e29b7d4f136a8f81716128d70d4af4faeef08d5ecc6488f7569f5edfdd4529d3", 0x3b, 0xfa}, {&(0x7f0000000140)="b654fcdd252e6d5a2cd282bee905d199cef9601c4b16e70c155acb21f7efb5fe5b50eafe816ca936e385ba01a0cfc862f70ce1c5e7b0d09664694a473bc5b7243f20869abb2d4365383b825f91947bd84082e87cf3596f90ed8738050fd562fd58b767dccdfdb8b71bde8d6485ddf19c3bea9974f90a326ed09799441a82bc0d3bb2ebf0ddda7fdc0e701b64b91fc1ad5a9ae5fa9de892de1adb86fde55ea43d1ca2e6232f3807694b373a4c3dce12dfa2adf70bb3563dc00dc333c8ef4013", 0xbf, 0x3}, {&(0x7f0000000240)="5f86ab008ab1d9f5adf511a0e9d51727278135e71176f0183723876c7aedaf674e73ca3ddeb67975516c73c4350520c39b2d6765eabeee00334c87de8270f4e4d466a789ef1117cd9a18f2d091fca50ec6f08519a879b61fde7316106ae3b8d97ce9710f111594214ad9d2b5b95bf9eaeb7fb7b5ba7ad8897bfa1c65bf2ecce6c1", 0x81, 0x100}, {&(0x7f0000000980)="d03fe39467eb329a7bf285148f9396d0d555687f1c19959d10d5cc46025cf3", 0x1f, 0x8}, {&(0x7f0000000340)="056b39555cbacd59f2d1f4115808210190852d2ac718f984310c7ba7370c1062f6223ae7bcb7bc4981fcfdf8b76bbfa51cc903e1c2b4907aacbc0940607ad0bdaf396f5e1b49d2af5bd1e0d7dc3f4afc02da1d7102ab6765740c36f199ba331747ad62e5c02b757d6aa2c1d23a0e1c5eead9b82419cf35e590d12d57d9cdb0e7be847c432e5416c3c693b228d92032444334a94e0d8389158d3a08", 0x9b, 0x5}, {&(0x7f0000000400)="eb5fc4fb2a888648118cfcab21efcf5dec4acd686983c77a1877dfedca8fbc1866c0227ca41592ac01a9c2044ff4d9dc0d15811e03cfe01a59fc4204589fd5f629d34141256a516c73cc1d08c3d5455f6cfeb06e1a602c65c93672b4", 0x5c, 0x9}, {&(0x7f0000000480)="c435b85b4ef82a29f06032d2e8f1f356fc8a96bce9ded6d63fb9f298f4ef777202deb0a8712d0141f33953c72e5ebd464d4c3821c27ee675aac52f360a513be7d28af2770473701d2d778974ca18fcc2a027c34b97bc794cd5497d6bd271b7b61c2e2472afbf21e27695b2f4561e7e4a7a4a362ac43da6cdd8f6ae3d05b43f21ff2ed922ad73147a0906b75009bcb78f6b2229a36840a9348d77700450f7dc16fcc49c1b36525681989c0ecc8c5c76119df0d77e97e8fb6113d349700544fec1be80a0a64fe792658e551803875545779cf1f582067037aee3c8eb214042f8d46f1f361b68f8db6c37e82c057c7f19e4590ebf83433d04", 0xf7, 0xffffffffffff7fff}, {&(0x7f0000000580)="8ef8d34276341a2a8d12ed97ba09f18be580922d04b28522da4cb18a9eab6d2e860590d94f9d04a2267b3db02f0569f79494cf78b11096a9de6cee4320e3d1d5e0e308f718e76592c45bcc46df1e81e92e7d9bb830e264a5c97cf5ad1f74b790fa1a9540a91582", 0x67, 0x6}], 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) 03:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5460, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 565.410649] hfs: unable to change codepage [ 565.428252] *** Guest State *** [ 565.440032] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 565.451226] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 565.460994] hfs: unable to parse mount options [ 565.479532] CR3 = 0x0000000000000000 03:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x20000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x6000000000000000}, 0x0) 03:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae80, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 565.505910] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 565.520633] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 565.527101] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 565.534179] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.542872] net_ratelimit: 20 callbacks suppressed [ 565.542879] protocol 88fb is buggy, dev hsr_slave_0 [ 565.552934] protocol 88fb is buggy, dev hsr_slave_1 [ 565.557770] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.566307] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.618017] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.622913] protocol 88fb is buggy, dev hsr_slave_0 [ 565.631155] protocol 88fb is buggy, dev hsr_slave_1 03:22:09 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c642dc166fd06c1116775cb86a97fc038f36bb7748eeaa719cf72652c7365636c6162656c2c6f626a5f726f6c653d65f46830212d2b8a894879f08068ca554de5293d470e9230e345ef43"]) [ 565.659883] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x1000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 565.702970] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.742541] GDTR: limit=0x00000000, base=0x0000000000000000 [ 565.782853] protocol 88fb is buggy, dev hsr_slave_0 [ 565.788044] protocol 88fb is buggy, dev hsr_slave_1 [ 565.800572] hfs: unable to change codepage [ 565.810758] hfs: unable to parse mount options [ 565.816786] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.838616] IDTR: limit=0x00000000, base=0x0000000000000000 [ 565.855998] [ 565.857668] ====================================================== [ 565.858665] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 565.863981] WARNING: possible circular locking dependency detected [ 565.863992] 5.0.0-rc7+ #85 Not tainted [ 565.863997] ------------------------------------------------------ [ 565.864007] syz-executor.5/30633 is trying to acquire lock: [ 565.864014] 00000000e24180d1 (&mm->mmap_sem){++++}, at: __do_page_fault+0x9c2/0xd60 [ 565.864052] [ 565.864052] but task is already holding lock: [ 565.864056] 000000000955db8a (&sb->s_type->i_mutex_key#12){+.+.}, at: generic_file_write_iter+0xdf/0x610 [ 565.864090] [ 565.864090] which lock already depends on the new lock. [ 565.864090] [ 565.864093] [ 565.864093] the existing dependency chain (in reverse order) is: [ 565.864102] [ 565.864102] -> #2 (&sb->s_type->i_mutex_key#12){+.+.}: [ 565.880985] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 565.882288] down_write+0x38/0x90 [ 565.882305] shmem_fallocate+0x15a/0xc60 [ 565.882325] ashmem_shrink_scan+0x1d7/0x4f0 [ 565.896046] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 565.902136] ashmem_ioctl+0x2f0/0x11a0 [ 565.902151] do_vfs_ioctl+0xd6e/0x1390 [ 565.902160] ksys_ioctl+0xab/0xd0 [ 565.902171] __x64_sys_ioctl+0x73/0xb0 [ 565.902206] do_syscall_64+0x103/0x610 [ 565.908473] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 565.917792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.917797] [ 565.917797] -> #1 (ashmem_mutex){+.+.}: [ 565.917821] __mutex_lock+0xf7/0x1310 [ 565.917832] mutex_lock_nested+0x16/0x20 [ 565.917845] ashmem_mmap+0x55/0x520 [ 565.917859] mmap_region+0xc37/0x1760 [ 565.917870] do_mmap+0x8e2/0x1080 [ 565.917889] vm_mmap_pgoff+0x1c5/0x230 [ 565.926431] Interruptibility = 00000000 ActivityState = 00000000 [ 565.933834] ksys_mmap_pgoff+0x4aa/0x630 [ 565.933848] __x64_sys_mmap+0xe9/0x1b0 [ 565.933862] do_syscall_64+0x103/0x610 [ 565.933876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.933880] [ 565.933880] -> #0 (&mm->mmap_sem){++++}: [ 565.933902] lock_acquire+0x16f/0x3f0 [ 565.933913] down_read+0x3b/0x90 [ 565.933927] __do_page_fault+0x9c2/0xd60 [ 565.933943] do_page_fault+0x71/0x581 [ 565.953307] *** Host State *** [ 565.955623] page_fault+0x1e/0x30 [ 565.955640] iov_iter_fault_in_readable+0x1ba/0x450 [ 565.955655] generic_perform_write+0x195/0x530 [ 565.955672] __generic_file_write_iter+0x25e/0x630 [ 565.963219] RIP = 0xffffffff811b34c0 RSP = 0xffff8880969ff8b8 [ 565.967954] generic_file_write_iter+0x360/0x610 [ 565.967969] __vfs_write+0x613/0x8e0 [ 565.967983] vfs_write+0x20c/0x580 [ 565.972526] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 565.976793] ksys_write+0xea/0x1f0 [ 565.976803] __x64_sys_write+0x73/0xb0 [ 565.976817] do_syscall_64+0x103/0x610 [ 565.976832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.976836] [ 565.976836] other info that might help us debug this: [ 565.976836] [ 565.976840] Chain exists of: [ 565.976840] &mm->mmap_sem --> ashmem_mutex --> &sb->s_type->i_mutex_key#12 [ 565.976840] [ 565.976859] Possible unsafe locking scenario: [ 565.976859] [ 565.976861] CPU0 CPU1 [ 565.976864] ---- ---- [ 565.976865] lock(&sb->s_type->i_mutex_key#12); [ 565.976879] lock(ashmem_mutex); [ 565.976884] lock(&sb->s_type->i_mutex_key#12); [ 565.976891] lock(&mm->mmap_sem); [ 565.976897] [ 565.976897] *** DEADLOCK *** [ 565.976897] [ 565.976904] 2 locks held by syz-executor.5/30633: [ 565.976912] #0: 00000000ea728332 (sb_writers#6){.+.+}, at: vfs_write+0x429/0x580 [ 565.983483] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 03:22:10 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff00000000}, 0x0) 03:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae9a, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 565.985268] #1: 000000000955db8a (&sb->s_type->i_mutex_key#12){+.+.}, at: generic_file_write_iter+0xdf/0x610 [ 565.985306] [ 565.985306] stack backtrace: [ 565.985322] CPU: 0 PID: 30633 Comm: syz-executor.5 Not tainted 5.0.0-rc7+ #85 [ 565.989862] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 565.998722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.998727] Call Trace: [ 565.998756] dump_stack+0x172/0x1f0 [ 565.998774] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 565.998787] __lock_acquire+0x2f00/0x4700 [ 565.998798] ? fixup_exception+0xad/0xe0 [ 565.998813] ? mark_held_locks+0x100/0x100 [ 565.998827] ? pgtable_bad+0x90/0x90 [ 565.998838] ? retint_kernel+0x2d/0x2d [ 565.998852] ? mark_held_locks+0x100/0x100 [ 565.998867] ? __lock_is_held+0xb6/0x140 [ 566.004837] CR0=0000000080050033 CR3=00000000a3d5e000 CR4=00000000001426f0 [ 566.010023] lock_acquire+0x16f/0x3f0 [ 566.010041] ? __do_page_fault+0x9c2/0xd60 [ 566.010059] down_read+0x3b/0x90 [ 566.010078] ? __do_page_fault+0x9c2/0xd60 [ 566.014593] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 566.018963] __do_page_fault+0x9c2/0xd60 [ 566.018983] do_page_fault+0x71/0x581 [ 566.018999] page_fault+0x1e/0x30 [ 566.019020] RIP: 0010:iov_iter_fault_in_readable+0x1ba/0x450 [ 566.023389] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 566.027451] Code: 4c 39 f3 76 17 eb 3b e8 54 2c 47 fe 48 81 c3 00 10 00 00 48 39 9d 68 ff ff ff 72 2d e8 3f 2c 47 fe 0f 1f 00 0f ae e8 45 31 f6 <8a> 13 0f 1f 00 31 ff 44 89 f6 41 88 57 d0 e8 a3 2d 47 fe 45 85 f6 [ 566.027459] RSP: 0018:ffff8880994d79b8 EFLAGS: 00010246 [ 566.027470] RAX: 0000000000040000 RBX: 0000000020000380 RCX: ffffc900108c4000 [ 566.027478] RDX: 00000000000004ca RSI: ffffffff8328b541 RDI: 0000000000000005 [ 566.027487] RBP: ffff8880994d7a58 R08: ffff88808ed0a640 R09: fffff94000408cb7 [ 566.027498] R10: fffff94000408cb6 R11: ffffea00020465b7 R12: 0000000000000001 [ 566.031592] *** Control State *** [ 566.035844] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880994d7a30 [ 566.035872] ? iov_iter_fault_in_readable+0x1b1/0x450 [ 566.035887] ? iov_iter_fault_in_readable+0x1b1/0x450 [ 566.035899] ? copy_page_from_iter+0x750/0x750 [ 566.035916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 566.035936] generic_perform_write+0x195/0x530 [ 566.042289] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 566.046718] ? page_endio+0x780/0x780 [ 566.046735] ? current_time+0x140/0x140 [ 566.046750] ? lock_acquire+0x16f/0x3f0 [ 566.046767] __generic_file_write_iter+0x25e/0x630 [ 566.046780] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 566.046792] generic_file_write_iter+0x360/0x610 [ 566.046805] ? __generic_file_write_iter+0x630/0x630 [ 566.046817] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 566.046830] ? iov_iter_init+0xea/0x220 [ 566.046846] __vfs_write+0x613/0x8e0 [ 566.052452] EntryControls=0000d3ff ExitControls=002fefff [ 566.055639] ? kernel_read+0x120/0x120 [ 566.055660] ? rcu_read_lock_sched_held+0x110/0x130 [ 566.055673] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 566.055686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.055699] ? __sb_start_write+0x1ac/0x360 [ 566.055712] vfs_write+0x20c/0x580 [ 566.055727] ksys_write+0xea/0x1f0 [ 566.055740] ? __ia32_sys_read+0xb0/0xb0 [ 566.055755] ? do_syscall_64+0x26/0x610 [ 566.055770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.055782] ? do_syscall_64+0x26/0x610 [ 566.055801] __x64_sys_write+0x73/0xb0 [ 566.061839] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 566.067029] do_syscall_64+0x103/0x610 [ 566.067046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.067055] RIP: 0033:0x457e29 [ 566.067069] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.067076] RSP: 002b:00007f15fc55fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.067088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 566.067095] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000006 [ 566.067102] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 566.067110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15fc5606d4 [ 566.067118] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 00000000ffffffff [ 566.091535] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 566.098294] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 566.105001] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 566.119097] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 566.122240] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 566.127295] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 566.127866] reason=80000021 qualification=0000000000000000 [ 566.134651] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 566.140721] IDTVectoring: info=00000000 errcode=00000000 [ 566.146538] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 566.147349] TSC Offset = 0xfffffececa1b64f1 [ 566.253826] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 566.261507] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.283035] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 566.291480] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.322831] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 566.335992] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.339901] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 566.354995] EPT pointer = 0x000000004bf6e01e [ 566.385526] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.387635] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.413641] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.423956] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.424126] protocol 88fb is buggy, dev hsr_slave_0 [ 566.446892] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.451819] protocol 88fb is buggy, dev hsr_slave_1 [ 566.458898] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.467396] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.672836] protocol 88fb is buggy, dev hsr_slave_0 [ 566.685428] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.692339] protocol 88fb is buggy, dev hsr_slave_1 [ 566.698861] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.713634] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.748796] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env 03:22:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0xf9, 0x0, [0xff, 0x8, 0x1, 0x9]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x2000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:11 executing program 1: getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:22:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea2, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 566.753169] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.761811] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 566.929050] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env 03:22:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 566.949432] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.956005] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 566.966000] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 566.973456] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.982658] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 566.982879] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x11000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 567.005418] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.021110] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.033135] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.041359] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.041898] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.056085] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 567.059251] *** Guest State *** [ 567.071123] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 567.089938] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:22:11 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) [ 567.092687] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.106123] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.118029] hfs: can't find a HFS filesystem on dev loop1 [ 567.121747] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 567.130500] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 567.141114] CR3 = 0x0000000000000000 03:22:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x40000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 567.148863] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.151439] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 567.173051] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.173425] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 567.196460] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 567.205492] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.208258] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.228452] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.236498] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.239879] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:11 executing program 1: getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 567.244807] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.253915] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.270565] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 567.295477] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea3, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 567.316519] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.335212] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.358061] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.358741] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.368520] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.378099] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.384634] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 567.390602] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.395491] GDTR: limit=0x00000000, base=0x0000000000000000 [ 567.406889] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.412139] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 567.432834] hfs: can't find a HFS filesystem on dev loop1 [ 567.438163] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.442410] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.457435] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 567.463405] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.464744] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.479337] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.479765] IDTR: limit=0x00000000, base=0x0000000000000000 [ 567.489363] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.497552] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 567.512555] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 567.522256] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 567.522322] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.531987] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 567.546271] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 567.554830] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.561795] Interruptibility = 00000000 ActivityState = 00000000 [ 567.568249] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.575529] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.577542] *** Host State *** [ 567.604124] RIP = 0xffffffff811b34c0 RSP = 0xffff88805563f8b8 [ 567.608469] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.616776] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.620400] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 567.638798] FSBase=00007effa9410700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 567.647431] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 567.653637] CR0=0000000080050033 CR3=0000000051b1c000 CR4=00000000001426f0 [ 567.660882] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 567.667804] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 567.674106] *** Control State *** [ 567.677683] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 567.684540] EntryControls=0000d3ff ExitControls=002fefff [ 567.691727] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 567.693420] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 567.704634] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 567.705335] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 567.721794] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 567.728584] reason=80000021 qualification=0000000000000000 [ 567.735319] IDTVectoring: info=00000000 errcode=00000000 [ 567.740925] TSC Offset = 0xfffffecde8361c6a [ 567.745384] EPT pointer = 0x00000000a7bb401e [ 567.749934] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:12 executing program 1: getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:22:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaead, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 567.756255] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.783492] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.789775] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.816660] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 567.829479] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 567.844097] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 567.851015] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.854767] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x2000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 567.869702] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.875994] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 567.894245] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 567.905905] *** Guest State *** [ 567.914333] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 567.926464] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.936424] hfs: can't find a HFS filesystem on dev loop1 [ 567.937680] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 567.959079] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 567.959924] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 567.972261] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 567.981858] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 567.992092] CR3 = 0x0000000000000000 [ 567.994709] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.004202] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 568.005808] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 568.013987] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 568.025317] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.030846] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 568.038957] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.047353] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.047370] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.056675] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.065174] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.092180] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.107457] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.120476] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.133525] GDTR: limit=0x00000000, base=0x0000000000000000 [ 568.160436] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.167078] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.173629] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.181663] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 568.192074] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.205059] IDTR: limit=0x00000000, base=0x0000000000000000 03:22:12 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x100000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:12 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0]) 03:22:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaeb7, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 568.236792] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 568.248604] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 568.255818] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 568.279198] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.283211] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 568.291908] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 568.305951] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.315922] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 568.327448] hfs: can't find a HFS filesystem on dev loop1 [ 568.333263] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 568.341778] Interruptibility = 00000000 ActivityState = 00000000 [ 568.348300] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.357360] *** Host State *** [ 568.357375] RIP = 0xffffffff811b34c0 RSP = 0xffff88808e8578b8 [ 568.357396] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 568.357407] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 568.357417] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 568.357433] CR0=0000000080050033 CR3=000000004a993000 CR4=00000000001426f0 [ 568.369289] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.376118] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 568.386013] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.396836] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.400303] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.422975] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.447011] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 568.450730] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 568.453976] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 568.470034] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 568.482169] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 568.492574] *** Control State *** [ 568.496301] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 568.506257] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 568.512935] EntryControls=0000d3ff ExitControls=002fefff [ 568.518552] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 568.520865] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.528384] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 568.537162] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.541591] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 568.564698] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 568.571158] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 568.586271] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 568.597346] reason=80000021 qualification=0000000000000000 [ 568.607131] IDTVectoring: info=00000000 errcode=00000000 [ 568.618898] TSC Offset = 0xfffffecd75e19e0e [ 568.623809] EPT pointer = 0x00000000840ce01e [ 568.631516] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xfffffffffffffffb) 03:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x200000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:12 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0]) 03:22:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40049409, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 568.638132] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.638215] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.645123] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.671030] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.677503] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.715956] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 568.727433] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 568.731606] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.746371] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 568.760042] hfs: can't find a HFS filesystem on dev loop1 [ 568.778421] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.790180] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.800211] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 568.808784] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x1100000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 568.814308] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.821857] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 568.849911] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.863177] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 568.875423] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 568.875695] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.881845] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 568.907616] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 568.920614] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 568.931064] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 568.947331] *** Guest State *** [ 568.960086] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 568.965613] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 568.976470] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 568.990203] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 568.997007] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.000227] CR3 = 0x0000000000000000 [ 569.010801] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.011869] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 569.034589] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 569.040970] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 569.048395] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 569.055439] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 569.066435] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.074854] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:22:13 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:13 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0]) 03:22:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x4000000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 569.083144] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.091170] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.099263] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.107268] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.116110] GDTR: limit=0x00000000, base=0x0000000000000000 [ 569.127332] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.147375] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.154331] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 569.158949] IDTR: limit=0x00000000, base=0x0000000000000000 [ 569.160782] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 569.189709] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.200394] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.210990] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.213381] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 569.231222] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 569.239732] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 569.242458] hfs: can't find a HFS filesystem on dev loop1 [ 569.256098] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 569.256699] Interruptibility = 00000000 ActivityState = 00000000 [ 569.262568] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 569.268938] *** Host State *** [ 569.285504] RIP = 0xffffffff811b34c0 RSP = 0xffff888096c078b8 [ 569.291642] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 569.292515] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.298688] FSBase=00007effa9431700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 569.307568] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 569.316003] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 569.319382] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.324805] CR0=0000000080050033 CR3=0000000054b5d000 CR4=00000000001426e0 [ 569.333787] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.347786] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 569.349710] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 569.354796] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.370564] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.379779] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.390034] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 569.403766] *** Control State *** [ 569.409214] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 569.427940] EntryControls=0000d3ff ExitControls=002fefff [ 569.434012] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 569.441029] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 569.442535] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.448094] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 569.461053] reason=80000021 qualification=0000000000000000 [ 569.468617] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.471148] IDTVectoring: info=00000000 errcode=00000000 [ 569.483496] TSC Offset = 0xfffffecceaaa0de1 [ 569.487905] EPT pointer = 0x000000005407401e [ 569.492499] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.496579] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 569.499284] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.509648] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 569.539790] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:22:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x8000000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:13 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) 03:22:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 569.546319] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.581685] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 569.589131] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.601456] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 569.607326] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.614946] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x8800000000000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 569.630519] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.637436] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.646462] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.658626] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.668632] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 569.676966] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 569.687365] hfs: can't find a HFS filesystem on dev loop1 [ 569.703153] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.711575] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 569.721711] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 569.731137] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.759109] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.769208] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.769422] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.783177] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.791640] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.802127] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.835868] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.843828] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.848045] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 569.860715] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 569.861058] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.871832] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 569.891571] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 569.897807] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.924111] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.927520] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 569.940496] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 569.964606] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 569.971110] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 569.982935] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env 03:22:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0xffffffff00000000, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:14 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) 03:22:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae99, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:14 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x40000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x38b, 0x8, 0x0, 0x3}, 0x4d, [0x0, 0x80000000, 0x3f, 0x4, 0x2, 0x7fffffff, 0x8, 0x7, 0x8, 0x3fe, 0x0, 0xfffffffffffffff7, 0x3, 0x2, 0x3ff, 0x7, 0x3, 0x1ff, 0xa96, 0x100000000, 0x1, 0x3, 0x8, 0x200, 0x0, 0x3f, 0x484e, 0x2, 0x7c7, 0x4, 0x8, 0x0, 0x0, 0x80000001, 0x1, 0x0, 0x1, 0x5, 0x0, 0x7, 0xb5, 0x10000, 0x0, 0x7, 0x401, 0x1f, 0x1f, 0x3, 0x8, 0xfffffffffffffffd, 0x1f, 0x5, 0x6, 0x1, 0x8, 0x8d, 0x81, 0x4, 0x5, 0x4000, 0x1, 0x101, 0x7, 0x7], [0xdf0, 0x6, 0x8000, 0x0, 0x7, 0x47, 0x200, 0x8, 0xffff, 0xfffffffffffffffc, 0x72b, 0xe5, 0x7fffffff, 0x80000000, 0x5, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x7ff, 0xffff, 0xd7, 0x7, 0xa565, 0xffffffffffffffff, 0x9, 0x100000000, 0x0, 0x0, 0x2, 0x4, 0x5, 0x7, 0x0, 0x6, 0x7, 0x4, 0xc4a, 0x100000001, 0x9, 0x1, 0x10000, 0x3, 0x1, 0x9, 0x7, 0x4, 0x4, 0xffffffff00000000, 0x0, 0x0, 0x4, 0x1, 0x101, 0x8, 0x7, 0xff, 0x5, 0x3ff, 0x2, 0x81, 0x4, 0x3f], [0x8, 0x91ae, 0x2, 0x200, 0x78, 0x80000000, 0xffffffffffff32cc, 0x7f, 0x792, 0x8001, 0x8001, 0x6, 0x20b, 0x0, 0xffffffff, 0x4, 0x6, 0x8, 0x9, 0x7d1, 0x40, 0x3, 0x80000001, 0x4, 0x1f, 0x6f7f3073, 0x7, 0x4, 0x0, 0x4, 0x6, 0x8, 0x8, 0x9, 0x3, 0x3, 0xbb2, 0xa51, 0x1ff, 0x80000001, 0x80000001, 0xfd1, 0x5cd, 0x7fff, 0x0, 0x3f, 0xfff, 0x6, 0x7ff, 0x8001, 0x3ff, 0x2, 0x4, 0xfff, 0x3, 0x8000, 0xffffffff80000001, 0x400, 0x1, 0x6, 0x6, 0x5, 0x3cf5, 0xffffffffffff0000], [0x4, 0x6, 0x2, 0x800, 0x0, 0x4, 0x81, 0x4, 0x20, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x81, 0x6, 0x7fffffff, 0x8, 0x50, 0x7, 0x2, 0x6, 0x1, 0xe0, 0x5, 0x1, 0x2, 0x0, 0x80, 0x95, 0x60, 0x80000001, 0x8, 0x5, 0x5, 0xaa4, 0xd000000000000000, 0x0, 0x80000001, 0xfffffffffffffffd, 0x14, 0x1, 0x3, 0xfffffffffffffffc, 0x8001, 0x5, 0x2, 0x6, 0x4, 0x7, 0x200, 0x9, 0xabb4, 0xffffffff, 0x7ff, 0x2, 0xfffffffffffff801, 0x1, 0x7, 0x160, 0x3, 0x5, 0xff, 0x80, 0xffffffffffffd597]}, 0x45c) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1ea, 0x4801) truncate(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RWRITE(r3, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x1000}, 0xb) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x5) connect$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @reserved}, 0x10) [ 569.989390] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 570.038457] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.039095] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.053178] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.053406] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.069888] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x2, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 570.088660] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 570.100787] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 570.101966] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.113288] hfs: can't find a HFS filesystem on dev loop1 03:22:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) [ 570.155818] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 570.164255] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 570.166960] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.187878] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 570.198018] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 570.204415] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.204459] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.218303] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.228934] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.233262] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 570.238665] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x3, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 570.262551] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) 03:22:14 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) [ 570.323802] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.338135] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.341653] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 570.362705] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x4, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 570.378852] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 570.384962] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.412706] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40086602, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 570.421279] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.430687] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.443275] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.456291] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.463220] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:22:14 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) [ 570.469997] hfs: can't find a HFS filesystem on dev loop1 03:22:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @pic={0x322, 0x1ff, 0x3, 0x9, 0x8, 0x7, 0x2f, 0x0, 0xfffffffffffffff7, 0x9, 0xe85, 0x20, 0xf5, 0xfffffffffffeffff, 0x5, 0x100000000}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) timerfd_gettime(r2, &(0x7f0000000180)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81, 0x8c000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, {}, {}, {}, {}, {0x0, 0x107000}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000000000}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM(0x23, 0x4e37bbfff0205085, &(0x7f0000ffa000/0x3000)=nil) 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x6, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 570.510623] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 570.511211] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.523416] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 570.528428] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 570.533617] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.550873] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.559757] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 570.563114] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.570084] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 570.584088] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.587823] net_ratelimit: 20 callbacks suppressed [ 570.587830] protocol 88fb is buggy, dev hsr_slave_0 [ 570.591542] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.596517] protocol 88fb is buggy, dev hsr_slave_1 [ 570.598144] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:22:14 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d3078303030303030303030303030356537642c636f6465706167653d69736f383835392d372c636f6465706167653d63703835322c64"]) 03:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x7, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 570.654412] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.671430] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.678597] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.695219] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:15 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) [ 570.710605] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 570.720471] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 570.723275] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.739813] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.748011] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 570.756669] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.763149] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.778597] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.788334] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.788716] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.804430] hfs: unable to change codepage 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x8, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 570.813231] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 570.820893] hfs: unable to parse mount options [ 570.825611] protocol 88fb is buggy, dev hsr_slave_0 [ 570.825654] protocol 88fb is buggy, dev hsr_slave_1 [ 570.831018] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.836216] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 570.854424] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 570.864633] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 570.883071] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 570.893496] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 570.900405] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 570.909831] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.918091] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 570.925025] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 570.934785] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:22:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40087602, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:15 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000002e40), 0x4) 03:22:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) accept4$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff43, 0x200000) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000080)=""/132) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmget$private(0x0, 0x3000, 0x980, &(0x7f0000ffb000/0x3000)=nil) 03:22:15 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x9, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 570.976044] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 570.984854] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 570.999766] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.007295] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 571.054069] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 571.065482] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 571.088107] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.091615] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env 03:22:15 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xa, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 571.094753] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.107107] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.121912] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.134846] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.135088] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.141230] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.148351] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 571.169757] hfs: can't find a HFS filesystem on dev loop1 [ 571.178322] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.184434] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 571.204020] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.216396] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.227445] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.238261] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 571.238886] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xb, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 571.246090] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.258968] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.265070] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 571.280601] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 571.282851] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.287716] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 571.295813] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.302912] protocol 88fb is buggy, dev hsr_slave_0 [ 571.314147] protocol 88fb is buggy, dev hsr_slave_1 [ 571.324523] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.330646] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.340562] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:22:15 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xc, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 571.344449] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.359108] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 571.359135] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 571.359533] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 571.376333] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.409718] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.418174] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.426207] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.430730] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 571.448701] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 571.456284] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.468138] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.482504] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 571.488106] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.496067] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env 03:22:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x80500, 0x0) write$9p(r2, &(0x7f0000000100)="0c02cd0faf5b80bf359d071ebd426d8aa2f57665042a9a33c45df9e2eef342147d44b564b73609dbc742a4a4bafb73db483f3e8df44086b0c0d00fb24a11869f8ce9502df7e329c25dc2a7d89270a0886881d4f8607159c39a1ac062ec58294e8564", 0x62) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = dup2(r0, r1) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x5468) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xd, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 571.506294] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.514392] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.516107] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.528785] hfs: can't find a HFS filesystem on dev loop1 [ 571.538456] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.546460] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.569160] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.575096] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.582626] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 571.586869] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.597416] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xe, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 571.614065] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.627743] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.630339] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.668991] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.681083] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.683727] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 571.691132] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.710824] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.718330] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 571.733647] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.736610] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.760272] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 571.767144] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 571.774235] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.777458] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 571.782975] protocol 88fb is buggy, dev hsr_slave_0 [ 571.783017] protocol 88fb is buggy, dev hsr_slave_1 [ 571.800222] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 571.811776] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 571.814638] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.818375] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.834891] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 571.845243] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 571.851753] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.861966] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 571.863258] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 571.868372] protocol 88fb is buggy, dev hsr_slave_0 [ 571.875022] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 571.879733] protocol 88fb is buggy, dev hsr_slave_1 [ 571.889585] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.899344] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 571.904167] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 571.919349] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 571.930780] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 571.937627] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:22:16 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:16 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB]) 03:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xf, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae8a, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 571.992031] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 572.000550] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 572.053750] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.057179] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.060047] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.078382] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x12, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 572.114631] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 572.121337] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.175881] hfs: can't find a HFS filesystem on dev loop1 [ 572.238538] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.246458] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 572.266737] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.274471] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:22:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x13, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 572.282892] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.300546] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.324537] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 572.330855] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.340102] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.344273] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.350457] kobject: 'loop5' (00000000e723791d): kobject_uevent_env 03:22:16 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d307830303030303030303030303035653764"]) 03:22:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x14, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 572.406267] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 572.439874] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 572.466968] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 572.513380] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.513683] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.545300] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.547490] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 572.555429] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 572.570321] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 572.590036] hfs: invalid session number or type of track [ 572.602138] hfs: can't find a HFS filesystem on dev loop1 [ 572.617900] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 572.630948] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 572.648061] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 572.655075] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 572.655910] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 572.661638] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:22:17 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x4) 03:22:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x15, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) 03:22:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) write$P9_ROPEN(r3, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x4}, 0xffffffff7fffffff}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:22:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae90, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 03:22:17 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d307830303030303030303030303035653764"]) [ 572.952141] kobject: 'loop2' (00000000cc13af74): kobject_uevent_env [ 572.960813] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.971039] kobject: 'loop2' (00000000cc13af74): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 572.976017] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 572.992952] kobject: 'loop1' (0000000066326217): kobject_uevent_env 03:22:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x16, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 573.003126] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.019737] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.019836] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.039917] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 573.045237] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 573.050429] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.058728] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.073412] hfs: invalid session number or type of track [ 573.100021] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 573.114841] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 573.119209] hfs: can't find a HFS filesystem on dev loop1 [ 573.130390] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 573.143569] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:22:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r2, 0x605, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:22:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x17, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 573.151632] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 573.159964] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 573.166637] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.167785] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 573.184365] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.185391] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:22:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x13, r0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) [ 573.193654] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.216586] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.233550] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env [ 573.239854] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.259691] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.273057] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.280721] kobject: 'kvm' (000000005c1bdaeb): kobject_uevent_env 03:22:17 executing program 1: r0 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c747970653d3506c3cc2c73657373696f6e3d307830303030303030303030303035653764"]) [ 573.301396] kobject: 'kvm' (000000005c1bdaeb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 573.304426] kobject: 'loop4' (00000000d10c9c39): kobject_uevent_env [ 573.333792] kobject: 'loop4' (00000000d10c9c39): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 573.366164] audit: type=1400 audit(1550978537.643:943): avc: denied { map } for pid=31129 comm="syz-executor.4" path="/dev/kvm" dev="devtmpfs" ino=15469 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:kvm_device_t:s0 tclass=chr_file permissive=1 [ 573.367254] *** Guest State *** [ 573.402222] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.405144] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.409332] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.430800] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.435766] hfs: invalid session number or type of track [ 573.440444] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 573.449003] hfs: can't find a HFS filesystem on dev loop1 [ 573.455504] kobject: 'loop0' (00000000eed61aaf): kobject_uevent_env [ 573.467021] kobject: 'loop0' (00000000eed61aaf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 573.467211] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 573.481748] kobject: 'loop5' (00000000e723791d): kobject_uevent_env [ 573.488305] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.492860] kobject: 'loop5' (00000000e723791d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 573.498585] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.515167] kobject: 'loop3' (000000002bb2bfd4): kobject_uevent_env [ 573.520105] CR3 = 0x0000000000000000 [ 573.524001] kobject: 'loop3' (000000002bb2bfd4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 573.528016] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 573.552945] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 573.582045] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 573.596642] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.598681] kobject: 'loop1' (0000000066326217): kobject_uevent_env [ 573.605054] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.617972] kobject: 'loop1' (0000000066326217): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 573.620208] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.640110] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.648562] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.657164] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.665581] GDTR: limit=0x00000000, base=0x0000000000000000 [ 573.673865] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.681857] IDTR: limit=0x00000000, base=0x0000000000000000 [ 573.689916] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 573.709489] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 573.715970] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 573.723458] Interruptibility = 00000000 ActivityState = 00000000 [ 573.729729] *** Host State *** [ 573.732976] RIP = 0xffffffff811b34c0 RSP = 0xffff8880980878b8 [ 573.738957] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 573.745413] FSBase=00007effa9452700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 573.753274] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 573.759181] CR0=0000000080050033 CR3=000000005cca8000 CR4=00000000001426f0 [ 573.766268] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 573.772981] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 573.779033] *** Control State *** 03:22:18 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002e40), 0x